Tracker / CVE-2013-1965
CVE-2013-1965
High 9.3
Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.
Affected products and versions
| apache | struts · 2.0.0 → 2.3.14.1 |
|---|---|
| apache | struts2-showcase · 2.0.0 → 2.3.13 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.