CVE-2014-0094
Publication date 11 March 2014
Last updated 24 July 2024
Ubuntu priority
Description
The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| libstruts1.2-java | ||