8b862f7cb2eaa6289ec9b36e7dc4a47521fc3bca | Vulnerability History Project

The Vulnerability History Project

WW-4105 Adds support for Spring proxies when chaining actions

by Randy the Sloth 2017-05-17 17:49:21 UTC

commit 8b862f7cb2eaa6289ec9b36e7dc4a47521fc3bca

Struts Fix Spring proxy DoS CVE-2017-9787

core/src/main/java/com/opensymphony/xwork2/interceptor/ChainingInterceptor.java

+1 -6

core/src/main/java/com/opensymphony/xwork2/util/ProxyUtil.java

-90

core/src/test/java/com/opensymphony/xwork2/TestSubBean.java

-14

core/src/test/java/com/opensymphony/xwork2/spring/ActionsFromSpringTest.java

-17

core/src/test/java/com/opensymphony/xwork2/spring/SpringProxyUtilTest.java

-85

core/src/test/resources/com/opensymphony/xwork2/spring/actionContext-spring.xml

+1 -25

core/src/test/resources/com/opensymphony/xwork2/spring/actionContext-xwork.xml

-19

expand_less