CVE-2013-4316
Fixed upstream EPSS 8%
Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.
Products: apache struts, oracle flexcube_private_banking, oracle mysql_enterprise_monitor, oracle webcenter_sites
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.struts:struts2-core | 2.3.15.2 |
| Maven | org.apache.struts:struts2-rest-plugin | 2.3.15.2 |