| Max CVSS | 9.3 | Min CVSS | 9.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2013-1966 | 9.3 |
Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag.
|
12-08-2019 - 21:15 | 10-07-2013 - 19:55 | |
| CVE-2013-1965 | 9.3 |
Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.
|
12-08-2019 - 21:15 | 10-07-2013 - 19:55 |