{"action":"Upgrade org.apache.struts:struts2-core to 2.3.20.1 or later.","affected":[{"fixed":"2.3.20.1","introduced":"2.0.0"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2015-1831"],"ecosystem":"Maven","epss":0.06363,"exploited":false,"fixed_versions":["2.3.20.1"],"ghsa_id":"GHSA-q2cg-xf9p-h457","id":"tcs_01M5N98CDEYPFEDWVDXM2MBFP0","modified_at":"2024-12-06T05:39:10.802082Z","published_at":"2022-05-17T00:50:08Z","references":["https://osv.dev/vulnerability/GHSA-q2cg-xf9p-h457","https://nvd.nist.gov/vuln/detail/CVE-2015-1831","https://github.com/apache/struts/commit/d832747d647df343ed07a58b1b5e540a05a4d51b","https://github.com/apache/struts","https://struts.apache.org/docs/s2-024.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-q2cg-xf9p-h457","url":"https://osv.dev/vulnerability/GHSA-q2cg-xf9p-h457"}],"summary":"Incomplete exclude pattern in Apache Struts"}