Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Struts | — | Upgrade to Apache Struts version 2.3.14.3 | Jan 19, 2018 | Jul 10, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub