Apache Struts2 Core 7.4.0 Integer Overflow

Apache Struts2 Core version 7.4.0 and below contains an integer-overflow validation bypass where locale grouping separators can allow out-of-range numeric input to be narrowed and wrapped during action-property conversion. The supplied proof of concept demonstrates an Integer value wrapping to a...