VULNERABILITY INTELLIGENCE

CVE-2014-0094

CVSS score5 MEDIUM
EPSS probability99.39%
CISA KEVNot currently listed
Published2014-03-11
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.

Primary references