CVE

Id
64263  
CVE No.
CVE-2013-4316  
Status
Candidate  
Description
Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
633943 64263 CVE-2013-4316 BUGTRAQ:20130921 [ANN] Struts 2.3.15.2 GA release available - security fix  View
633944 64263 CVE-2013-4316 URL:http://archives.neohapsis.com/archives/bugtraq/2013-09/0107.html  View
633945 64263 CVE-2013-4316 CONFIRM:http://struts.apache.org/release/2.3.x/docs/s2-019.html  View
633946 64263 CVE-2013-4316 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html  View
633947 64263 CVE-2013-4316 BID:64758  View
633948 64263 CVE-2013-4316 URL:http://www.securityfocus.com/bid/64758  View
633949 64263 CVE-2013-4316 SECTRACK:1029078  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24915 JVNDB-2013-006490 TYPO3 の File Abstraction Layer における任意の PHP コードを実行される脆弱性 TYPO3 の File Abstraction Layer (FAL) には、任意の PHP コードを実行される脆弱性が存在します。 CVE-2013-4321 64263 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006490.html  View