vulnerability

Apache Struts: S2-059 (CVE-2019-0230): Security updates available for Apache Struts

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Aug 17, 2020
Added
Aug 17, 2020
Modified
Dec 30, 2024

Description

Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.

Solution

apache-struts-upgrade-2_5_22
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.