NVD

Id
38335  
Name
CVE-2013-2248  
Description
Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-07-19  
Modified Date
2016-12-30  
Seq
2013-2248  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
196049 38335 CVE-2013-2248 http://struts.apache.org/release/2.3.x/docs/s2-017.html  View
196050 38335 CVE-2013-2248 http://www.fujitsu.com/global/support/software/security/products-f/interstage-bpm-analytics-201301e.html  View
196051 38335 CVE-2013-2248 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html  View
196052 38335 CVE-2013-2248 http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html  View
196053 38335 CVE-2013-2248 61196  View
196054 38335 CVE-2013-2248 64758  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21895 JVNDB-2013-003470 Apache Struts におけるオープンリダイレクトの脆弱性 Apache Struts には、オープンリダイレクトの脆弱性が存在します。 CVE-2013-2248 62190 CVE-2013-2248 38335 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003470.html 2013-07-09 2014-06-26 View