CVE-2020-17530

Fixed upstream ExploitedEPSS 96%CVSS 9.8

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.

Published 2020-12-11 · In CISA KEV since 2021-11-03 · CVE record · OSV

Products: Apache Software Foundation Apache Struts

Fixed upstream