https://bugzilla.redhat.com/show_bug.cgi?id=1869672
--- Doc Text *updated* by Eric Christensen <sparks(a)redhat.com> ---
A flaw was found in Apache Struts frameworks. When forced, struts2 performs double
evaluation of attributes' values assigned to certain tags attributes such as ID so it
is possible to pass a value that will be evaluated again when a tag's attributes will
be rendered. With a carefully crafted request, this can lead to Remote Code Execution
(RCE). The largest threat from this vulnerability is to data confidentiality and integrity
as well as system availability.
--
You are receiving this mail because:
You are on the CC list for the bug.