Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2013-1965

Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
apache / struts 2.0.0 2.3.14.1
apache / struts2-showcase 2.0.0 2.3.13.x
org.apache.struts / struts2-core - 2.3.14.3