Tag

cve-2019-0230

Safeguard articles tagged "cve-2019-0230" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

CVE-2019-0230: OGNL remote code execution in Apache Struts2

CVE-2019-0230 lets attackers chain forced double OGNL evaluation in Struts2 tag attributes into remote code execution. Here's what's affected, the CVSS/EPSS context, and how to remediate it.

Oct 1, 20258 min read