Security Advisory
CVE-2016-0785
8.8
HIGH
Vulnerability Description
Apache Struts 2.x before 2.3.28 allows remote attackers to execute arbitrary code via a "%{}" sequence in a tag attribute, aka forced double OGNL evaluation.
Published Date
April 12, 2016
Official Source
NIST NVD Advisory