GHSA-vq79-mgpx-2wx4HighCVSS 7.5

Apache Struts Access Control Redirect

Published
May 17, 2022
Last Modified
December 28, 2023

🔗 CVE IDs covered (1)

CVE-2016-4431 →

📋 Description

Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks by leveraging a default method.

🎯 Affected products1

  • maven/org.apache.struts:struts-parent:>= 2.3.20, <= 2.3.28.1

🔗 References (11)