CVE-2013-1965
40Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 93%
exploitation probability
93%top 1% of all CVEs
observed exploitation
nono source reports it
Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.
Affected products
n/a · n/a