Skip to content
Sign in
Not rated

CVE-2019-0230 Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may…

Description

Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.

Affected products and versions

Product Affected versions Fixed in
Apache Struts Versions not published

Other CVEs of Apache Struts

The 2 CVEs of Apache Struts →
CVE-2019-0233 An access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when performing a file… Not rated
Track this CVE