5d999d6ac145c769191cc2e9a4897a47093f43d8 | Vulnerability History Project

The Vulnerability History Project

Adds a constant to control when proxy can be accessed

by Randy the Sloth 2017-06-22 07:01:35 UTC

commit 5d999d6ac145c769191cc2e9a4897a47093f43d8

Struts Fix Spring proxy DoS CVE-2017-9787

core/src/main/java/com/opensymphony/xwork2/ognl/OgnlUtil.java

-12

core/src/main/java/com/opensymphony/xwork2/ognl/OgnlValueStack.java

-1

core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java

+1 -6

core/src/main/java/org/apache/struts2/StrutsConstants.java

-2

core/src/test/java/com/opensymphony/xwork2/ognl/SecurityMemberAccessProxyTest.java

-49

core/src/test/resources/com/opensymphony/xwork2/spring/actionContext-xwork.xml

-1

plugins/spring/src/main/resources/struts-plugin.xml

-2

expand_less