Lucene search

K
cvelistRedhatCVELIST:CVE-2013-2115
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2013-2115

2022-10-0316:15:02
redhat
www.cve.org

8.2 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.4%

Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag. NOTE: this issue is due to an incomplete fix for CVE-2013-1966.