CVE-2013-2248
At a glance Severity Not available EPSS EPSS 94.65 % · percentile 100 (2026-10-28) State PUBLISHED Published 2013-07-18 Updated 2024-08-06 Assigner redhat NVD status Modified Description Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix.
Scores Version Score Vector Scored by CVSS 2.0 MEDIUM 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
Advisories
European references
Affected configurations (NVD CPE) cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.10:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.12:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.13:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.0.14:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.1.0:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.1.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.1.2:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.1.3:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.1.4:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.1.5:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.1.6:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.1.8:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.1.8.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.2.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.2.1.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.2.3:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.2.3.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.1.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.1.2:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.3:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.4:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.4.1:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*+4 more Affected products Product Versions affected n/a
References
Sources
