Executive brief
Apache Struts forced double OGNL evaluation
Affected products
- Maven org.apache.struts:struts2-core
Junglewise Threat Intelligence
CVE-2016-4461 · Severity: low · CVSS 3 · Published 2022-05-14
Technologies: org.apache.struts:struts2-core (Maven). Vendors: Maven.
Apache Struts forced double OGNL evaluation