Exposures › CVE-2012-0391

CVE-2012-0391

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-01-21

Reference

https://nvd.nist.gov/vuln/detail/CVE-2012-0391

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for remote code execution.

Players implicated

apache · vendor Struts 2 · product

Description

The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for remote code execution.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.