{"action":"Upgrade org.apache.struts:struts2-core to 2.3.1.2 or later.","affected":[{"fixed":"2.3.1.2","introduced":"2.0.0"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2011-3923"],"ecosystem":"Maven","epss":0.89492,"exploited":false,"fixed_versions":["2.3.1.2"],"ghsa_id":"GHSA-j68f-8h6p-9h5q","id":"tcs_01M5N924PGYHY96KSWP925AHZ6","modified_at":"2024-02-16T08:24:48.651940Z","published_at":"2022-04-22T00:24:08Z","references":["https://osv.dev/vulnerability/GHSA-j68f-8h6p-9h5q","https://nvd.nist.gov/vuln/detail/CVE-2011-3923","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3923","https://exchange.xforce.ibmcloud.com/vulnerabilities/72585","https://security-tracker.debian.org/tracker/CVE-2011-3923","https://web.archive.org/web/20140725074137/http://seclists.org/fulldisclosure/2014/Jul/38","http://blog.o0o.nu/2012/01/cve-2011-3923-yet-another-struts2.html","http://struts.apache.org/development/2.x/docs/s2-009.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-j68f-8h6p-9h5q","url":"https://osv.dev/vulnerability/GHSA-j68f-8h6p-9h5q"}],"summary":"Struts ParameterInterceptor vulnerability allows remote command execution"}