eb8aae87521e627d3cd333e4dc351390bf1e80dc | Vulnerability History Project

The Vulnerability History Project

Adds additional default exclude patterns to avoid access to #context

by Randy the Sloth 2014-06-05 06:25:24 UTC

commit eb8aae87521e627d3cd333e4dc351390bf1e80dc

Struts VCC Improper Input Validation CVE-2015-1831

xwork-core/src/main/java/com/opensymphony/xwork2/security/DefaultExcludedPatternsChecker.java

+1 -3

xwork-core/src/test/java/com/opensymphony/xwork2/interceptor/ParametersInterceptorTest.java

+4 -2

xwork-core/src/test/java/com/opensymphony/xwork2/security/DefaultExcludedPatternsCheckerTest.java

-4

expand_less