PT-2020-5501

Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.0.0 through 2.5.25 Description The issue is caused by incorrect handling of Object Graph Navigation Language OGNL expressions, which may lead to remote code execution when evaluated on raw user input in tag attributes...

CVE-2017-9787

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...