Unrated
Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.
CVE-2019-0230
First seen on SecPulse
Original description The description as published by the source.
Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory cwiki.apache.org
- patch oracle.com
- patch oracle.com
- patch oracle.com
- report launchpad.support.sap.com
- report packetstormsecurity.com
- report packetstormsecurity.com
- web lists.apache.org
- web lists.apache.org