description: Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.
problem types: Remote Code Execution
affected:
{
product: Apache Struts
vendor: Apache Software Foundation
versions:
status: affected, version: Struts 2.0.0 - Struts 2.5.25
}