CVE-2013-2248

Published: Jul 20, 2013Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix.

Affected (44)

Products: Apache: Struts

Apache

1 product

Struts

Configuration A

44 vulnerable

Vulnerable Software	Affected Versions
Apache Struts	Version 2.0.0
Apache Struts	Version 2.0.10
Apache Struts	Version 2.0.11.1
Apache Struts	Version 2.0.11.2
Apache Struts	Version 2.0.11
Apache Struts	Version 2.0.12
Apache Struts	Version 2.0.13
Apache Struts	Version 2.0.14
Apache Struts	Version 2.0.1
Apache Struts	Version 2.0.2
Apache Struts	Version 2.0.3
Apache Struts	Version 2.0.4
Apache Struts	Version 2.0.5
Apache Struts	Version 2.0.6
Apache Struts	Version 2.0.7
Apache Struts	Version 2.0.8
Apache Struts	Version 2.0.9
Apache Struts	Version 2.1.0
Apache Struts	Version 2.1.1
Apache Struts	Version 2.1.2
Apache Struts	Version 2.1.3
Apache Struts	Version 2.1.4
Apache Struts	Version 2.1.5
Apache Struts	Version 2.1.6
Apache Struts	Version 2.1.8.1
Apache Struts	Version 2.1.8
Apache Struts	Version 2.2.1.1
Apache Struts	Version 2.2.1
Apache Struts	Version 2.2.3.1
Apache Struts	Version 2.2.3
Apache Struts	Version 2.3.1.1
Apache Struts	Version 2.3.1.2
Apache Struts	Version 2.3.12
Apache Struts	Version 2.3.14.1
Apache Struts	Version 2.3.14.2
Apache Struts	Version 2.3.14.3
Apache Struts	Version 2.3.14
Apache Struts	Version 2.3.15
Apache Struts	Version 2.3.1
Apache Struts	Version 2.3.3
Apache Struts	Version 2.3.4.1
Apache Struts	Version 2.3.4
Apache Struts	Version 2.3.7
Apache Struts	Version 2.3.8