{"action":"Upgrade org.apache.struts:struts2-core to 2.3.20 or later.","affected":[{"fixed":"2.3.20","introduced":"0"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2014-0116"],"ecosystem":"Maven","epss":0.06569,"exploited":false,"fixed_versions":["2.3.20"],"ghsa_id":"GHSA-hmhq-382q-mp56","id":"tcs_01M5N90XVH2M5JF4EBEVN5H6SD","modified_at":"2024-12-06T05:43:03.047253Z","published_at":"2022-05-14T00:54:14Z","references":["https://osv.dev/vulnerability/GHSA-hmhq-382q-mp56","https://nvd.nist.gov/vuln/detail/CVE-2014-0116","https://github.com/apache/struts/commit/1a668af7f1ffccea4a3b46d8d8c1fe1c7331ff02","https://github.com/apache/struts","http://struts.apache.org/release/2.3.x/docs/s2-022.html","http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-hmhq-382q-mp56","url":"https://osv.dev/vulnerability/GHSA-hmhq-382q-mp56"}],"summary":"ClassLoader manipulation in Apache Struts"}