Files
CVEs-PoC/2013/CVE-2013-6348.md
T
2024-06-18 02:51:15 +02:00

745 B

CVE-2013-6348

Description

Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.3.15.3 allow remote attackers to inject arbitrary web script or HTML via the namespace parameter to (1) actionNames.action and (2) showConfig.action in config-browser/.

POC

Reference

Github

No PoCs found on GitHub currently.