description: Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.
problem types: Other
affected:
{
product: Struts
vendor: Apache
versions:
status: affected, version: 2.3.1.2
}