CVE-2014-0116
1 advisory.
Maven/org.apache.struts:struts2-core CVE-2014-0116: high, EPSS 6.57%
ClassLoader manipulation in Apache Struts
Action: Upgrade org.apache.struts:struts2-core to 2.3.20 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.20 | - |
Fixed versions
| 2.3.20 |
Sources
- osv: GHSA-hmhq-382q-mp56
- https://nvd.nist.gov/vuln/detail/CVE-2014-0116
- https://github.com/apache/struts/commit/1a668af7f1ffccea4a3b46d8d8c1fe1c7331ff02
- https://github.com/apache/struts
- http://struts.apache.org/release/2.3.x/docs/s2-022.html
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm
CVE-2014-0116 · published · modified · JSON