CVE-2016-3093
Fixed upstream EPSS 8%
Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors.
Products: ognl_project ognl, apache struts
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | ognl:ognl | 3.0.12 |
| Maven | org.apache.struts:struts2-core | 2.3.24.3 |