CVE-2014-0094
The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to…
published March 10, 2014
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.9th percentile for exploit probability.
What it is
The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.99388 · 99.9th percentile
- Published
- 2014-03-10T14:00Z
EPSS history
Timeline