CVE-2016-4430

Apache Struts 2 2.3.20 through 2.3.28.1 mishandles token validation, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via…

published July 4, 2016

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

Apache Struts 2 2.3.20 through 2.3.28.1 mishandles token validation, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03701 · 89.6th percentile
Published
2016-07-04T22:00Z
EPSS history
Timeline
  • 04 JUL 22:00Z
    Apache Struts 2 2.3.20 through 2.3.28.1 mishandles token validation, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via…
    cvelistv5