CVE-2011-3923

Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.

Date published : 2019-11-01

http://www.securityfocus.com/bid/51628

http://www.exploit-db.com/exploits/24874