CVE-2012-0838
CVE-2012-0838
Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →