CISA Warns of Apache Struts Command Injection Vulnerability Exploited in Attacks
CISA has added a long-standing Apache Struts flaw, tracked as CVE-2016-3081, to its Known Exploited Vulnerabilities catalog after confirming that attackers are using it in real-world attacks. The issue is a command injection vulnerability in Apache Struts that can allow a remote attacker to run code on a vulnerable server when Dynamic Method Invocation is
Reported so far by one publisher.
Summary from Cyber Security News.
Reporting1
Cyber Security News CISA Warns of Apache Struts Command Injection Vulnerability Exploited in Attacks · Abinaya