CVE-2025-53192 Apache Commons OGNL: Expression Injection leading to RCE

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue​, the OGNL engine parses and evaluates the provided expression with powerful capabilities...

berkano:bean-displaytag (>=20050615.234814, <=20050616.015551), berkano:berkano-util (>=dev-20050722, <=20050901-2) +7 more potentially affected by CVE-2016-3093 via ognl:ognl (2.6.5)

ognl:ognl MAVEN version 2.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on ognl:ognl and may be impacted: - berkano:bean-displaytag =20050615.234814, =dev-20050722, =0.9.14-alpha, =0.9.16-beta, =0.9.18-beta, =0.9.19-beta - xfire:xfire-java...

br.com.caelum.stella:vraptor-validator-example (>=2.0-beta1, <=2.2.2), br.com.caelum.vraptor:vraptor-environment (1.0.1) +178 more potentially affected by CVE-2016-3093 via ognl:ognl (2.7.3)

ognl:ognl MAVEN version 2.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on ognl:ognl and may be impacted: - br.com.caelum.stella:vraptor-validator-example =2.0-beta1, =1.0.1, =1.0.0, =1.0.1, =3.1.1, =1.0.0, =1.0.0, =1.0.0, =1.5.2 -...

CVE-2013-2251: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted 1 action:, 2 redirect:, or 3 redirectAction: prefix...

PT-2012-1211

Name of the Vulnerable Software and Affected Versions Apache Struts versions prior to 2.2.3.1 Description The issue arises from improper input validation in the ExceptionDelegator component of Apache Struts. This component interprets parameter values as OGNL expressions during certain exception...