Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2012-0391

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-4wrr-9h5r-m92w

Apache Struts Remote Java Code Execution The `ExceptionDelegator` component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter.

gitlab/maven/org.apache.struts/struts2-core/CVE-2012-0391

Apache Struts Remote Java Code Execution The `ExceptionDelegator` component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter.

gitlab/maven/org.apache.struts/struts2-parent/CVE-2012-0391

Improper Input Validation The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter.

gitlab/maven/org.apache.struts.xwork/xwork-core/CVE-2012-0391

Apache Struts Remote Java Code Execution The `ExceptionDelegator` component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter.