Cybersecurity Alerts

Apache Struts 2 Improper Input Validation Vulnerability

The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for remote code execution.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-20

References

• https://nvd.nist.gov/vuln/detail/CVE-2012-0391