Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2016-3081

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-8c6j-ffmf-q6vm

Apache Struts RCE Vulnerability Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.

gitlab/maven/org.apache.struts/struts2-core/CVE-2016-3081

Improper Neutralization of Special Elements used in a Command ('Command Injection') Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.