Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.
Apache
Information Disclosure
Oracle
Struts
Mysql Enterprise Monitor
+2
NVD
CVSS 2.0
10.0
EPSS
6.2%