CVE-2013-2251 in MySQL Enterprise Monitor

Summary

Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

02/19/2013

Disclosure

07/19/2013

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
10815	Oracle MySQL Enterprise Monitor Service Manager injection	74	Attacked	Official fix	CVE-2013-2251
10747	Oracle FLEXCUBE Private Banking injection	74	Attacked	Official fix	CVE-2013-2251
9567	Apache Struts DefaultActionMapper injection	74	Attacked	Official fix	CVE-2013-2251

Sources

• MITRE
• NVD
• CVE Details