CVE-2016-4438

Critical

Published: 04/07/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The REST plugin in Apache Struts 2 versions 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression.

An attacker can exploit this vulnerability to execute remote code, potentially gaining control over the system.

It is recommended to update Apache Struts to the latest version to mitigate this vulnerability.

Original NVD description (English source)

The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression.