CVE-2014-0094

The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.

Date published : 2014-03-10

http://www.securityfocus.com/bid/65999

http://www.securityfocus.com/archive/1/531362/100/0/threaded