virus logo FortiClient Vulnerability

Apache Struts CVE-2013-2251 Input Validation Bypass Vulnerability

description-logoDescription

The Struts 2 DefaultActionMapper supports a method for short-circuit navigation state changes by prefixing parameters with "action:" or "redirect:", followed by a desired navigational target expression. This mechanism was intended to help with attaching navigational information to buttons within forms.

affected-products-logoAffected Applications

Apache Struts

CVE References

CVE-2013-2251

Other References

https://cwiki.apache.org/confluence/display/WW/Security+Bulletins
ID 41605
Created Jan 17, 2020
Description
Updated		 Dec 14, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
Coverage FortiClient
OS Linux
Vendor Apache
Patch manual
Application Apache Struts