Tracker / CVE-2013-2251
CVE-2013-2251
Exploited Critical 9.8
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
Affected products and versions
| apache | archiva |
|---|---|
| apache | archiva · 1.3 → 1.3.8 |
| apache | struts · 2.0.0 → 2.3.15 |
| fujitsu | interstage_business_process_manager_analytics |
| oracle | siebel_apps_-_e-billing |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.