Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
Bug 723827 - (CVE-2011-1772) CVE-2011-1772 struts: Multiple XSS flaws in XWork
CVE-2011-1772 struts: Multiple XSS flaws in XWork
Status: CLOSED NOTABUG
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
public=20110222,reported=20110611,sou...
: Security
Depends On:
Blocks: 723833
  Show dependency treegraph
 
Reported: 2011-07-21 05:31 EDT by Jan Lieskovsky
Modified: 2016-03-04 06:45 EST (History)
6 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2011-07-25 04:24:01 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Jan Lieskovsky 2011-07-21 05:31:15 EDT
Common Vulnerabilities and Exposures assigned an identifier CVE-2011-1772 to the following vulnerability:

Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the action attribute of an s:submit element, or (3) the method attribute of an s:submit element.

References:
[1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1772
[2] http://secureappdev.blogspot.com/2011/05/Struts_2_XWork_WebWork_XSS_in_error_pages.html
[3] http://secureappdev.blogspot.com/2011/05/apache-struts-2-xwork-webwork-reflected.html
[4] http://www.ventuneac.net/security-advisories/MVSA-11-006
[5] http://struts.apache.org/2.2.3/docs/version-notes-223.html
[6] http://struts.apache.org/2.x/docs/s2-006.html
[7] https://issues.apache.org/jira/browse/WW-3579
[8] http://www.securityfocus.com/bid/47784
[9] http://www.vupen.com/english/advisories/2011/1198
Comment 1 Jan Lieskovsky 2011-07-21 05:34:04 EDT
Based on:
[10] https://bugzilla.novell.com/show_bug.cgi?id=693976#c3

it's more than likely this flaw would not affect any of our Struts-1.x package version, shipped across different supported products. But we need to double-check, confirm and note this.
Comment 2 David Jorm 2011-07-25 04:24:01 EDT
This issue only affects struts 2.x.

Statement:

Not vulnerable. This issue did not affect the versions of struts as shipped
with Red Hat Enterprise Linux 5, Red Hat Network Satellite 5, JBoss Enterprise Web Server 1, JBoss Enterprise Application Platform 4, JBoss Enterprise Portal Platform 4 and JBoss Operations Network 2.

Note You need to log in before you can comment on or make changes to this bug.