VYPR
Moderate severityNVD Advisory· Published Mar 11, 2014· Updated Jun 17, 2026

CVE-2014-0094

CVE-2014-0094

Description

The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.struts:struts2-coreMaven
>= 2.0.0, < 2.3.16.22.3.16.2
org.apache.struts.xwork:xwork-coreMaven
>= 2.0.0, < 2.3.16.22.3.16.2

Affected products

3

Patches

Vulnerability mechanics

References

19

News mentions

0

No linked articles in our index yet.