virus logo FortiClient Vulnerability

Apache Struts CVE-2016-3090 Input Validation Bypass Vulnerability

description-logoDescription

TextParseUtil.translateVariablesevaluates a given String with OGNL. Before Struts 2.3.20, a specially crafted String incorporating ANTLR tooling can, when passed to said method, cause a remote code execution.

affected-products-logoAffected Applications

Apache Struts

CVE References

CVE-2016-3090

Other References

https://cwiki.apache.org/confluence/display/WW/Security+Bulletins
ID 49289
Created Jan 17, 2020
Description
Updated		 Dec 14, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
Coverage FortiClient
OS Linux
Vendor Apache
Patch manual
Application Apache Struts