CVE-2016-3093 in Struts
Summary
Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
03/10/2016
Disclosure
06/07/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 87718 | Apache Struts OGNL Caching input validation | 20 | Not defined | Official fix | CVE-2016-3093 |