{"action":"Upgrade org.apache.struts:struts2-core to 2.3.14.2 or later.","affected":[{"fixed":"2.3.14.2","introduced":"2.0.0"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2013-2115"],"ecosystem":"Maven","epss":0.74636,"exploited":false,"fixed_versions":["2.3.14.2"],"ghsa_id":"GHSA-7ghm-rpc7-p7g5","id":"tcs_01M5N8JC8FR5PCNB47QNR7R6J1","modified_at":"2024-02-16T08:09:37.605203Z","published_at":"2022-05-13T01:16:08Z","references":["https://osv.dev/vulnerability/GHSA-7ghm-rpc7-p7g5","https://nvd.nist.gov/vuln/detail/CVE-2013-2115","https://github.com/apache/struts/commit/d7804297e319c7a12245e1b536e565fcea6d650","https://github.com/apache/struts/commit/d934c6e7430b7b98e43a0a085a2304bd31a75c3d","https://github.com/apache/struts/commit/ea96d18d0f75c390d2595648efa3563785c272c6","https://github.com/apache/struts/commit/fed4f8e8a4ec69b5e7612b92d8ce3e476680474","https://bugzilla.redhat.com/show_bug.cgi?id=967656","https://cwiki.apache.org/confluence/display/WW/S2-013","https://cwiki.apache.org/confluence/display/WW/S2-014","https://github.com/apache/struts","https://issues.apache.org/jira/browse/WW-4063","https://web.archive.org/web/20140212000331/http://www.securityfocus.com/bid/60167","http://struts.apache.org/development/2.x/docs/s2-014.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-7ghm-rpc7-p7g5","url":"https://osv.dev/vulnerability/GHSA-7ghm-rpc7-p7g5"}],"summary":"Code injection in Apache Struts"}