CVE-2014-7809

Apache Struts 2.0.0 through 2.3.x before 2.3.20 uses predictable values, which allows remote attackers to bypass the CSRF protection mechanism.

Date published : 2014-12-10

http://www.securityfocus.com/bid/71548

http://www.securityfocus.com/archive/1/534175/100/0/threaded