Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-whmq-v94q-34p9

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-whmq-v94q-34p9

Improper Control of Generation of Code in Apache Struts Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.

gitlab/maven/org.apache.struts/struts2-core/CVE-2013-1965

Improper Control of Generation of Code ('Code Injection') Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.