CVE-2016-3093

—

CVSS 3.0

5.3 medium

EPSS

8%p95

Published

Jun 7, 2016 (Jun 7, 2016)

Modified

Jun 17, 2026

Description

Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors.

Vendors: ognl project apache
Products: ognl, struts
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (8.4%)

In the news0 stories

No ingested article mentions this CVE yet.