{"action":"Upgrade org.apache.struts:struts2-core to 2.3.15.3 or later.","affected":[{"fixed":"2.3.15.3","introduced":"0"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2013-4310"],"ecosystem":"Maven","epss":0.06523,"exploited":false,"fixed_versions":["2.3.15.3"],"ghsa_id":"GHSA-q5q8-jghf-3pm3","id":"tcs_01M5N98RTQWRDG17Q5VH18YJ3S","modified_at":"2024-12-07T05:38:33.380493Z","published_at":"2022-05-17T04:44:52Z","references":["https://osv.dev/vulnerability/GHSA-q5q8-jghf-3pm3","https://nvd.nist.gov/vuln/detail/CVE-2013-4310","https://github.com/apache/struts/commit/0c8366cb792227d484b9ca13e537037dd0cb57dc","https://github.com/apache/struts","http://struts.apache.org/release/2.3.x/docs/s2-018.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-q5q8-jghf-3pm3","url":"https://osv.dev/vulnerability/GHSA-q5q8-jghf-3pm3"}],"summary":"Apache Struts2 Broken Access Control Vulnerability"}