CVE-2016-4436

Critical

Published: 03/10/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.

The organization may be exposed to unauthorized actions that could compromise system integrity.

It is recommended to upgrade to Apache Struts 2.3.29 or 2.5.1 to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.