cbcvebase.
CVE-2012-4386
published 2012-09-05

CVE-2012-4386: The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers…

PriorityP429medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
3.33%
87.3th percentile
The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute.

Affected

35 ranges· showing 25
VendorProductVersion rangeFixed in
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.