Read the docs

Ognl Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ognl Project records in CISA KEV

No Ognl Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 35

Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified ve…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.08443 Published 2016-06-07 Fixed in 2.3.24.3, 3.0.12 CWE-20
Open these records in search →