dentaku:dentaku-foundation (>=20050106.213646, <=20050113.005422), marmalade:marmalade-el-ognl (>=1.0-alpha2, <=1.0-alpha-3) +12 more potentially affected by CVE-2016-3093 via ognl:ognl (2.5.1)

ognl:ognl MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on ognl:ognl and may be impacted: - dentaku:dentaku-foundation =20050106.213646, =1.0-alpha2, =1.0-alpha-1, =1.0-beta-8, =1.0-beta-1, =1.0-beta-3, =1.0-beta-5, =1.0-beta-6 Sourc...

Server side object manipulation in Apache Struts

OGNL provides, among other features, extensive expression evaluation capabilities. This vulnerability allows a malicious user to bypass the ''-usage protection built into the ParametersInterceptor, thus being able to manipulate server side context objects. This behavior was already addressed in...

CVE-2010-1870: Undefined Security Weakness

The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects and bypass the "" protection mechanis...