debian-mirror-gitlab/spec/fixtures/security-reports/feature-branch/gl-dependency-scanning-report.json

47 lines
1.3 KiB
JSON
Raw Normal View History

2018-12-13 13:39:08 +05:30
[
{
2018-12-23 12:14:25 +05:30
"priority": "Unknown",
2019-01-03 12:48:30 +05:30
"file": "pom.xml",
"cve": "CVE-2012-4387",
"url": "http://struts.apache.org/docs/s2-011.html",
"message": "Long parameter name DoS for org.apache.struts/struts2-core",
"tools": [
"gemnasium"
],
2018-12-13 13:39:08 +05:30
"tool": "gemnasium"
},
{
2018-12-23 12:14:25 +05:30
"priority": "Unknown",
2019-01-03 12:48:30 +05:30
"file": "pom.xml",
"cve": "CVE-2013-1966",
"url": "http://struts.apache.org/docs/s2-014.html",
"message": "Remote command execution due to flaw in the includeParams attribute of URL and Anchor tags for org.apache.struts/struts2-core",
"tools": [
"gemnasium"
],
2018-12-13 13:39:08 +05:30
"tool": "gemnasium"
},
{
2018-12-23 12:14:25 +05:30
"priority": "Unknown",
2019-01-03 12:48:30 +05:30
"file": "pom.xml",
"cve": "CVE-2013-2115",
"url": "http://struts.apache.org/docs/s2-014.html",
"message": "Remote command execution due to flaw in the includeParams attribute of URL and Anchor tags for org.apache.struts/struts2-core",
"tools": [
"gemnasium"
],
2018-12-13 13:39:08 +05:30
"tool": "gemnasium"
},
{
2019-01-03 12:48:30 +05:30
"priority": "Unknown",
"file": "pom.xml",
"cve": "CVE-2013-2134",
"url": "http://struts.apache.org/docs/s2-015.html",
"message": "Arbitrary OGNL code execution via unsanitized wildcard matching for org.apache.struts/struts2-core",
"tools": [
"gemnasium"
2018-12-23 12:14:25 +05:30
],
2019-01-03 12:48:30 +05:30
"tool": "gemnasium"
2018-12-13 13:39:08 +05:30
}
]