Apache Struts CVE-2008-6505 Path Traversal Vulnerability
Description
The Struts2 dispatcher logic by design allows to serve certain static resources found in the classpath of the web application for request URIs having a context relative path starting with "/struts/".
Affected Applications
Apache Struts