{"id":"CVE-2011-2088","aliases":[],"url":"https://o3.security/vulnerability/CVE-2011-2088","summary":"XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork in OpenSymphony WebWork, allows remote attackers to obtain potentially sensitive information about internal Java class paths…","details":"XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork in OpenSymphony WebWork, allows remote attackers to obtain potentially sensitive information about internal Java class paths via vectors involving an s:submit element and a nonexistent method, a different vulnerability than CVE-2011-1772.3.","published":"2011-05-13T17:00:00.000Z","modified":"2024-08-06T22:46:00.961Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://issues.apache.org/jira/browse/WW-3579"},{"type":"WEB","url":"http://secureappdev.blogspot.com/2011/05/Struts_2_XWork_WebWork_XSS_in_error_pages.html"},{"type":"WEB","url":"http://www.ventuneac.net/security-advisories/MVSA-11-006"},{"type":"WEB","url":"http://secureappdev.blogspot.com/2011/05/apache-struts-2-xwork-webwork-reflected.html"},{"type":"REPORT","url":"http://www.securityfocus.com/archive/1/518066/100/0/threaded"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2024-08-06T22:46:00.961Z"}}