Description
Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object.
Remediation
References
https://struts.apache.org/docs/s2-026.html
http://www.securitytracker.com/id/1033908
http://www.securityfocus.com/bid/82550
https://security.netapp.com/advisory/ntap-20180629-0002/
Related Vulnerabilities
CVE-2023-32007 Vulnerability in maven package org.apache.spark:spark-core_2.12
CVE-2020-1758 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2023-46496 Vulnerability in npm package @evershop/evershop
CVE-2017-18353 Vulnerability in npm package rendertron-middleware
CVE-2022-31198 Vulnerability in npm package @openzeppelin/contracts-upgradeable