CVE-2013-2251
Apache Struts 2 arbitrary OGNL code execution via crafted parameters
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
CVSS 3.1 · 9.8 Critical
EPSS 100.0%
KEV · Listed
Vendors
Products