description: A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.
problem types: xsltResult local code execution flaw
affected:
{
product: libstruts1.2-java
vendor: libstruts1.2-java
versions:
status: affected, version: 1.2-
}