CVE-2015-1831: Undefined Security Weakness

The default exclude patterns excludeParams in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors...

PT-2015-5461

Name of the Vulnerable Software and Affected Versions Apache Struts version 2.3.20 Description The default exclude patterns in Apache Struts allow remote attackers to compromise the internal state of an application via unspecified vectors. Recommendations For Apache Struts version 2.3.20, conside...