CVE-2016-3093 in Struts

Resumen (Inglés)

Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2016-03-10

Divulgación

2016-06-07

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
87718	Apache Struts OGNL Caching escalada de privilegios	20	No está definido	Arreglo oficial	CVE-2016-3093

Fuentes

• MITRE
• NVD
• CVE Details