CVE-2012-1592
HIGH 8.8EPSS 28.5%
A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.
- Affected
- libstruts1.2-java
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P - EPSS
- 28.55% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2019-12-05
- Updated
- 2024-08-06
ExploitDB entries (1)
Security advisories
- http://www.openwall.com/lists/oss-security/2012/03/28/12
- https://access.redhat.com/security/cve/cve-2012-1592
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1592
- https://security-tracker.debian.org/tracker/CVE-2012-1592
- advisories/GHSA-8m5q-crqq-6pmf