CVE-2013-4316
Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.
- EPSS
- 8.4% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-16, CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:struts
- oracle:flexcube_private_banking
- oracle:mysql_enterprise_monitor
- oracle:webcenter_sites
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-j7h6-xr7g-m2c5 | Maven | org.apache.struts:struts2-core | >=2.0.0 <2.3.15.2 | 2.3.15.2 |
| GHSA-j7h6-xr7g-m2c5 | Maven | org.apache.struts:struts2-rest-plugin | >=2.0.0 <2.3.15.2 | 2.3.15.2 |