CVE-2013-2251

Fixed upstream ExploitedEPSS 100%CVSS 9.8

Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.

Published 2013-07-18 · In CISA KEV since 2022-03-25 · CVE record · OSV

Products: apache archiva, apache struts, fujitsu interstage_business_process_manager_analytics, oracle siebel_apps_-_e-billing

Fixed upstream