Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2013-2134

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-gqqm-564f-vvxq

Arbitrary code execution in Apache Struts 2 Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135.

gitlab/maven/org.apache.struts/struts2-core/CVE-2013-2134

Arbitrary OGNL code execution via unsanitized wildcard matching This package allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135.

gitlab/maven/org.apache.struts/struts2-el/CVE-2013-2134

Code Injection Apache Struts 2 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135.

gitlab/maven/org.apache.struts.xwork/xwork-core/CVE-2013-2134

Improper Control of Generation of Code ('Code Injection') Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135.