- Vendor / Project
- Apache
- Product
- Struts 2
- Date added
- Jan 21, 2022
- Due date
- Jul 21, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-20
Description
The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for remote code execution.
Required action
Apply updates per vendor instructions.