CyberSec.Space Logo
CVEブラウザに戻る

CVE-2025-68493

HIGH
8.1
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2026-01-11
Last Modified2026-07-15
Data SourcesNVD

Vulnerability Description

Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 through 6.1.0. Users are recommended to upgrade to version 6.1.1, which fixes the issue.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://cwiki.apache.org/confluence/display/WW/S2-069
🔗 http://www.openwall.com/lists/oss-security/2026/01/11/2
🔗 https://access.redhat.com/security/cve/CVE-2025-68493
🔗 https://bugzilla.redhat.com/show_bug.cgi?id=2428559
🔗 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68493.json

関連する脆弱性情報

CVE-2026-674394.3

OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/...

CVE-2026-674386.6

OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/execu...

CVE-2026-674377.5

OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/...

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...