CVE-2012-4387

Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name, which is processed as an OGNL expression.

Date published : 2012-09-05

http://www.securityfocus.com/bid/55346

http://struts.apache.org/2.x/docs/s2-011.html