• A possible Remote Code Execution attack when using an unintentional expression in Freemarker tag instead of string literals.

• Upgrade to Struts 2.5.12 or Struts 2.3.34

• • Security Bulletin S2-053

• 

• CVE-2017-12611

• CWE-94

• CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

• Code Execution Known Vulnerabilities

• WordPress Plugin VaultPress Man-in-The-Middle (MiTM) Remote Code Execution (1.8.6)
• Drupal Core 4.7.x Arbitrary Code Execution (4.7.0 - 4.7.0)
• phpThumb() fltr[] parameter command injection vulnerability
• Drupal Remote Code Execution (SA-CORE-2018-002)
• Ektron CMS unauthenticated code execution and Local File Read