Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2013-1965

struts2: remote command execution in Showcase app

Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.

CVSS 2.0 · 9.3 Critical EPSS 93.5% KEV · Not listed
Vendors
Apache
Products
Struts Struts2-showcase