Threats tagged 'ghsa-cx25-xg7c-xfm5'

Apache Struts Extras versions up to 1.3.10, including 1.2.9, have an improper output neutralization vulnerability in logging when using LookupDispatchAction. This flaw allows specially crafted input to be logged in a way that can masquerade as separate log entries, potentially confusing log consumers. The project is retired and no fix will be released. Users are advised to migrate to alternatives or restrict access to trusted users.