CVE-2019-0230

Fixed upstream EPSS 97%

Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.

Published 2020-09-14 · CVE record · OSV

Products: apache struts, oracle communications_policy_management, oracle financial_services_data_integration_hub, oracle financial_services_market_risk_measurement_and_management, oracle mysql_enterprise_monitor

Fixed upstream