{"id":"CVE-2016-3093","published":"2016-06-07T18:00:00Z","modified":"2024-08-05T23:40:15Z","title":"Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12…","vendor":null,"product":null,"tier":"tail","description":{"text":"Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.08443,"percentile":0.94967,"provenance":"source"},"cwes":[],"references":[{"url":"http://struts.apache.org/docs/s2-034.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/90961","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securitytracker.com/id/1036018","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21987854","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef%40%3Cdev.struts.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":19.0,"factors":[{"name":"EPSS percentile","points":18.99}]},"affected":[{"ecosystem":"Maven","package":"org.apache.struts:struts2-core","vulnerableRanges":[">=2.0.0, <2.3.24.3"],"patched":["2.3.24.3"],"from":["GHSA-383p-xqxx-rrmp"],"provenance":"source"},{"ecosystem":"Maven","package":"ognl:ognl","vulnerableRanges":["<3.0.12"],"patched":["3.0.12"],"from":["GHSA-383p-xqxx-rrmp"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2130","exploited":false,"provenance":"source"}}