coldbraid

CVE-2012-0391 Apache Struts 2

The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for remote code execution.

CVSS
not scored

CWE-20

On CISA’s exploited list

Apache Struts 2 Improper Input Validation Vulnerability

Added
2022-01-21
Federal patch deadline
2022-07-21
Ransomware use
not known