{"action":"Upgrade org.apache.struts:struts2-core to 2.3.15.2 or later.","affected":[{"fixed":"2.3.15.2","introduced":"2.0.0"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2013-4316"],"ecosystem":"Maven","epss":0.08401,"exploited":false,"fixed_versions":["2.3.15.2"],"ghsa_id":"GHSA-j7h6-xr7g-m2c5","id":"tcs_01M5N92849CN5E3PQSP5AR9GRT","modified_at":"2024-12-06T05:40:06.508760Z","published_at":"2022-05-17T03:28:23Z","references":["https://osv.dev/vulnerability/GHSA-j7h6-xr7g-m2c5","https://nvd.nist.gov/vuln/detail/CVE-2013-4316","https://github.com/apache/struts/commit/58947c3f85ae641c1a476316a2888e53605948d1","https://github.com/apache/struts/commit/c643336945dda84cbcdc8a39530baa24fede28c4","https://github.com/apache/struts","http://archives.neohapsis.com/archives/bugtraq/2013-09/0107.html","http://struts.apache.org/release/2.3.x/docs/s2-019.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-j7h6-xr7g-m2c5","url":"https://osv.dev/vulnerability/GHSA-j7h6-xr7g-m2c5"}],"summary":"Code injection in Apache Struts"}