Security Vulnerabilities fixed in Apache Struts S2-015

Description

Struts 2 allows define action mapping base on wildcards, like in example below:

Affected Applications

Apache Struts

CVE References

CVE-2013-2135 CVE-2013-2134

Other References

https://cwiki.apache.org/confluence/display/WW/Security+Bulletins