New vulnerability on the NVD: CVE-2019-0230

Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.

Published at: September 14, 2020 at 08:15PM
View on website