CVE-2012-0391 — Apache Struts 2 Improper Input Validation Vulnerability

provenance: imported · CVE: CVE-2012-0391

CVE-2012-0391: Apache Struts 2 Improper Input Validation Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Apache
Product	Struts 2
Date added	2022-01-21
Due date	2022-07-21
Ransomware campaign use	Unknown

Description

The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for remote code execution.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2012-0391

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-0391
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog