CVE-2013-4316
Code injection in Apache Struts
EPSS 6.2%
Description
Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.
How to fix CVE-2013-4316
To remediate CVE-2013-4316, upgrade the affected package to a fixed version below.
- Maven/org.apache.struts:struts2-core—upgrade to 2.3.15.2 or later
- Maven/org.apache.struts:struts2-rest-plugin—upgrade to 2.3.15.2 or later
Is CVE-2013-4316 being exploited?
Moderate — EPSS is 6.2%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (2)
- >= 2.0.0, < 2.3.15.2
- >= 2.0.0, < 2.3.15.2