https://github.com/ghusta/struts1-cve-security-checks

Security checks (CVE) in Struts 1.x
https://github.com/ghusta/struts1-cve-security-checks

cve maven owasp security struts1

Last synced: 5 days ago
JSON representation

Security checks (CVE) in Struts 1.x

• Host: GitHub
• URL: https://github.com/ghusta/struts1-cve-security-checks
• Owner: ghusta
• Created: 2018-04-06T16:11:25.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2021-01-18T10:41:13.000Z (almost 4 years ago)
• Last Synced: 2024-04-16T11:34:53.664Z (7 months ago)
• Topics: cve, maven, owasp, security, struts1
• Language: HTML
• Size: 76.2 KB
• Stars: 0
• Watchers: 2
• Forks: 0
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Security checks (CVE) in Struts 1.x

[![Build Status](https://travis-ci.org/ghusta/struts1-cve-security-checks.svg?branch=master)](https://travis-ci.org/ghusta/struts1-cve-security-checks)

It will check any **security issues** in dependencies used by Struts 1.3.

The [OWASP Dependency Check](https://www.owasp.org/index.php/OWASP_Dependency_Check) Maven plugin is used to do so, 

and will use the [NVD database](https://nvd.nist.gov/vuln/data-feeds). 

## Usage

> mvn verify

## Report

Open the file `./target/dependency-check-report.html` or check the console output.

### Sample

See a report sample [there](./report-sample/dependency-check-report.html).

### Vulnerabilities reported

The vulnerabilities reported will be those as this page, minus the suppressed false positives : [cpe:/a:apache:struts:1.3.10](https://web.nvd.nist.gov/view/vuln/search-results?adv_search=true&cves=on&cpe_version=cpe%3A%2Fa%3Aapache%3Astruts%3A1.3.10).