Security Advisory
CVE-2016-3082
9.8
CRITICAL
Vulnerability Description
XSLTResult in Apache Struts 2.x before 2.3.20.2, 2.3.24.x before 2.3.24.2, and 2.3.28.x before 2.3.28.1 allows remote attackers to execute arbitrary code via the stylesheet location parameter.
Published Date
April 26, 2016
Official Source
NIST NVD Advisory