Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2013-1966

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-737w-mh58-cxjp

Arbitrary code execution in Apache Struts Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag.

gitlab/maven/org.apache.struts/struts2-core/CVE-2013-1966

Remote command execution due to flaw in the includeParams attribute of URL and Anchor tags This package allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the `includeParams` attribute in the URL or A tag.

gitlab/maven/org.apache.struts.xwork/xwork-core/CVE-2013-1966

Improper Control of Generation of Code ('Code Injection') Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag.