CVE-2016-3093 in Struts
Résumé (Anglaise)
Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Réserver
10/03/2016
Divulgation
07/06/2016
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 87718 | Apache Struts OGNL Caching élévation de privilèges | 20 | Non défini | Correctif officiel | CVE-2016-3093 |