high7.5
CVE-2015-1831
The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified ve…
Impact
The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Struts | Version 2.3.20 |