Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2013-4316

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-j7h6-xr7g-m2c5

Code injection in Apache Struts Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.

gitlab/maven/org.apache.struts/struts2-core/CVE-2013-4316

This package enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.

gitlab/maven/org.apache.struts/struts2-rest-plugin/CVE-2013-4316

Improper Access Control Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.