Description
XSLTResult in Apache Struts 2.x before 2.3.20.2, 2.3.24.x before 2.3.24.2, and 2.3.28.x before 2.3.28.1 allows remote attackers to execute arbitrary code via the stylesheet location parameter.
Remediation
References
http://struts.apache.org/docs/s2-031.html
http://www.securityfocus.com/bid/88826
http://www.securitytracker.com/id/1035664
Related Vulnerabilities
CVE-2020-8203 Vulnerability in npm package @sailshq/lodash
CVE-2023-31007 Vulnerability in maven package org.apache.pulsar:pulsar-broker
CVE-2017-15010 Vulnerability in npm package tough-cookie
CVE-2023-50719 Vulnerability in maven package org.xwiki.platform:xwiki-platform-search-solr-api
CVE-2013-2067 Vulnerability in maven package org.apache.tomcat:catalina