{"action":"Upgrade org.apache.struts:struts2-core to 2.3.20 or later.","affected":[{"fixed":"2.3.20","introduced":"0"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2014-0112"],"ecosystem":"Maven","epss":0.98056,"exploited":false,"fixed_versions":["2.3.20"],"ghsa_id":"GHSA-prjv-jj26-wf8h","id":"tcs_01M5N97ZR4NP5555K40E3SY54C","modified_at":"2024-12-06T05:39:13.806224Z","published_at":"2022-05-14T00:54:16Z","references":["https://osv.dev/vulnerability/GHSA-prjv-jj26-wf8h","https://nvd.nist.gov/vuln/detail/CVE-2014-0112","https://access.redhat.com/errata/RHSA-2019:0910","https://bugzilla.redhat.com/show_bug.cgi?id=1091939","https://cwiki.apache.org/confluence/display/WW/S2-021","https://github.com/apache/struts","http://jvn.jp/en/jp/JVN19294237/index.html","http://jvndb.jvn.jp/jvndb/JVNDB-2014-000045","http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html","http://www-01.ibm.com/support/docview.wss?uid=swg21676706","http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","http://www.vmware.com/security/advisories/VMSA-2014-0007.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-prjv-jj26-wf8h","url":"https://osv.dev/vulnerability/GHSA-prjv-jj26-wf8h"}],"summary":"ClassLoader manipulation in Apache Struts"}