CVE-2014-0094
Fixed upstream EPSS 99%
The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.
Products: apache struts
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.struts.xwork:xwork-core | 2.3.16.2 |
| Maven | org.apache.struts:struts2-core | 2.3.16.2 |