Security Update for libstruts1.2-java
Summary
DSA-3536-1: libstruts1.2-java - security update. Affects libstruts1.2-java versions < 1.2.9-5+deb7u2. Fixed in 1.2.9-5+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libstruts1.2-java is a Java framework for MVC applications. It provides a structure for developing web applications based on the Model-View-Controller architectural pattern. The framework offers various features for handling user input, validation, and rendering views. However, a vulnerability has been discovered in the multi-page validation code of libstruts1.2-java, which allows input validation to be bypassed.
Vulnerability Detail
The vulnerability in libstruts1.2-java's multi-page validation code enables an attacker to bypass input validation, even if the multi-page validation feature is not directly used. This can lead to potential security breaches and unauthorized access to sensitive data. The issue has been assigned the CVE identifier CVE-2015-0899.
How To Fix
Minimum fixed version
1.2.9-5+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libstruts1.2-javaTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The libstruts1.2-java package contains a vulnerability in its multi-page validation code that allows input validation to be bypassed. To mitigate this issue, it is crucial to upgrade to the fixed version of the package. For further assistance and support in vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for libstruts1.2-java →
FAQ
libstruts1.2-java is a Java framework for MVC applications, providing a structure for developing web applications based on the Model-View-Controller architectural pattern.
The vulnerability allows input validation to be bypassed, potentially leading to security breaches and unauthorized access to sensitive data.
To fix this vulnerability, upgrade the libstruts1.2-java package to version 1.2.9-5+deb7u2 or later.
No specific workaround has been mentioned for this vulnerability.
For more information, you can refer to the Debian Security Advisory DSA-3536-1.
Related vulnerabilities
Recent vulnerabilities recorded for libstruts1.2-java.
