15857a69e7baf3675804495a5954cd0756ac8364 | Vulnerability History Project

The Vulnerability History Project

Reduces expression evaluation if there is no expression

by Randy the Sloth 2016-03-06 09:07:06 UTC

commit 15857a69e7baf3675804495a5954cd0756ac8364

Struts VCC Forced Double OGNL Evaluation CVE-2016-4461

core/src/main/java/org/apache/struts2/components/Component.java

+1 -5

core/src/main/java/org/apache/struts2/util/ComponentUtils.java

+3 -6

core/src/main/java/org/apache/struts2/views/jsp/ui/AbstractUITag.java

+1 -1

core/src/test/java/org/apache/struts2/util/ComponentUtilsTest.java

-44

expand_less