Posted by SEC Consult Vulnerability Lab on Jan 05
SEC Consult Vulnerability Lab Security Advisory < 20120104-0 >
=======================================================================
title: Multiple critical vulnerabilities in Apache Struts2
product: Apache Struts2
* OpenSymphony XWork
* OpenSymphony OGNL
vulnerable version: 2.3.1 and below
fixed version: 2.3.1.1
impact: critical
homepage:…
Source: SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2
