Planet Briefing

First published · Last updated

CVE-2016-3081: Apache Struts Command Injection Vulnerability

The source describes an Apache Struts command injection vulnerability that could allow remote attackers to execute arbitrary code when Dynamic Method Invocation is enabled. It calls for applying mitigations or discontinuing the product if mitigations are unavailable.

Why it matters

The source directs stakeholders to assess asset exposure and follow patching guidance.

Categories: technology

Generated scores

Scores are based on the cited reporting and use a 1–10 scale. Read the methodology.

Confidence
6/10
Geographic reach
1/10
Global importance
2/10
Impact magnitude
2/10
Positivity
3/10
Urgency
4/10

Sources

Report an issue

Read our editorial process and corrections policy.