CVE

CVE-2012-0391

Apache Struts 2 Improper Input Validation Vulnerability

Apache · Struts 2

Date added (CISA)

2022-01-21

Remediation due

2022-07-21

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for remote code execution.

Source: NVD ↗ · CISA KEV Catalog ↗