Security Advisory

CVE-2020-17530

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-12-11 01:11:04
Last updated 2025-10-21 23:35:31
Assigner apache
State PUBLISHED

Description

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.