CVE-2015-2992
published 2020-02-27CVE-2015-2992: Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.
medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | struts | >= 2.0.0 < 2.3.20 | 2.3.20 |
| apache_software_foundation | apache_struts | — | — |