CVE-2016-4433

Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request

published July 4, 2016

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09755 · 95.5th percentile
Published
2016-07-04T22:00Z
EPSS history
Timeline
  • 04 JUL 22:00Z
    Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request
    cvelistv5