CVE-2012-1592

Published: Dec 5, 2019

Modified: Aug 6, 2024

PUBLISHED

Description

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.

Vendor	Product	Versions
libstruts1.2-java	libstruts1.2-java	affected `1.2-`

References

https://security-tracker.debian.org/tracker/CVE-2012-1592

x_refsource_MISC

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1592

x_refsource_MISC

https://access.redhat.com/security/cve/cve-2012-1592

x_refsource_MISC

http://www.openwall.com/lists/oss-security/2012/03/28/12

x_refsource_MISC

[struts-issues] 20200122 [jira] [Created] (WW-5055) Fix for security vulnerability CVE-2012-1592 identified in the National Vulnerability Database

mailing-list

x_refsource_MLIST

[struts-issues] 20200123 [jira] [Closed] (WW-5055) Fix for security vulnerability CVE-2012-1592 identified in the National Vulnerability Database

mailing-list

x_refsource_MLIST

[struts-issues] 20200903 [jira] [Commented] (WW-5055) Fix for security vulnerability CVE-2012-1592 identified in the National Vulnerability Database

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2012-1592

Description

Affected Products

References