086b63735527d4bb0c1dd0d86a7c0374b825ff24 | Vulnerability History Project

The Vulnerability History Project

Adds constant to control proxy member access

by Maude the Cheetah 2017-07-07 09:05:10 UTC

commit 086b63735527d4bb0c1dd0d86a7c0374b825ff24

Struts Fix Spring proxy DoS CVE-2017-9787

plugins/spring/src/main/resources/struts-plugin.xml

-1

xwork-core/src/main/java/com/opensymphony/xwork2/XWorkConstants.java

-1

xwork-core/src/main/java/com/opensymphony/xwork2/ognl/OgnlUtil.java

-11

xwork-core/src/main/java/com/opensymphony/xwork2/ognl/OgnlValueStack.java

-1

xwork-core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java

+1 -6

xwork-core/src/test/java/com/opensymphony/xwork2/ognl/SecurityMemberAccessProxyTest.java

-49

xwork-core/src/test/resources/com/opensymphony/xwork2/spring/actionContext-xwork.xml

-1

expand_less