CVE-2020-17530

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 – Struts 2.5.25.

Date published : 2020-12-10

https://cwiki.apache.org/confluence/display/WW/S2-061

https://security.netapp.com/advisory/ntap-20210115-0005/