CVE-2012-1592: Unrestricted Upload of File with Dangerous Type

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files...