CVE Catalog
CVE-2016-3082
CriticalSummary
In Apache Struts 2.x before version 2.3.20.2, 2.3.24.x before 2.3.24.2, and 2.3.28.x before 2.3.28.1, a vulnerability allows remote attackers to execute arbitrary code via the stylesheet location parameter.
Risk Assessment
This vulnerability could lead to remote code execution, posing a serious threat to the security of the application and the organization's data.
Recommendation
It is recommended to upgrade to the latest version of Apache Struts to mitigate this vulnerability.
Original NVD description (English source)
XSLTResult in Apache Struts 2.x before 2.3.20.2, 2.3.24.x before 2.3.24.2, and 2.3.28.x before 2.3.28.1 allows remote attackers to execute arbitrary code via the stylesheet location parameter.