CVE-2006-1546

Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a…

published March 30, 2006

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled but would not be detected from applications that do not use the isCancelled check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06286 · 93.6th percentile
Published
2006-03-30T22:00Z
EPSS history
Timeline
  • 30 MAR 22:00Z
    Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a…
    cvelistv5