CISA Warns of Apache Struts Command Injection Vulnerability Exploited in Attacks

CISA has added a long-standing Apache Struts flaw, tracked as CVE-2016-3081, to its Known Exploited Vulnerabilities catalog after confirming that attackers are using it in real-world attacks. The issue is a command injection vulnerability in Apache Struts that can allow a remote attacker to run code on a vulnerable server when Dynamic Method Invocation is […]

This article has been indexed from Cyber Security News

Read the original article: