{"action":"Upgrade org.apache.struts:struts2-core to 2.3.15.1 or later.","affected":[{"fixed":"2.3.15.1","introduced":"0"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2013-2248"],"ecosystem":"Maven","epss":0.94654,"exploited":false,"fixed_versions":["2.3.15.1"],"ghsa_id":"GHSA-rpj9-r897-wc6q","id":"tcs_01M5N9C7T4M9K453Z2PS2CCZYT","modified_at":"2024-12-06T05:32:00.926793Z","published_at":"2022-05-17T03:13:10Z","references":["https://osv.dev/vulnerability/GHSA-rpj9-r897-wc6q","https://nvd.nist.gov/vuln/detail/CVE-2013-2248","https://github.com/apache/struts/commit/3cfe34fefedcf0fdcfcb061c0aea34a715b7de6","https://github.com/apache/struts/commit/630e1ba065a8215c4e9ac03bfb09be9d655c2b6e","https://github.com/apache/struts","https://issues.apache.org/jira/browse/WW-4140","http://struts.apache.org/release/2.3.x/docs/s2-017.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-rpj9-r897-wc6q","url":"https://osv.dev/vulnerability/GHSA-rpj9-r897-wc6q"}],"summary":"Open redirect in Apache Struts"}