Description
The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Apache Struts | Apache Software Foundation / Apache Struts | 2.1.x series | affected |
| Apache Struts | Apache Software Foundation / Apache Struts | 2.3.x series | affected |