Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cau...

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

References

• advisory struts.apache.org
• web www-01.ibm.com
• web securityfocus.com
• web securitytracker.com
• web lists.apache.org