The Vulnerability History Project

Security issue fixed (see [1] for further details)

      [1] https://cwiki.apache.org/confluence/display/WW/S2-009

git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@1234212 13f79535-47bb-0310-9956-ffa450edef68

by Angelo the Ragdoll 2012-01-21 00:04:43 UTC

commit cc6edbb49a31e06b7fbf3b2a9e97f898e677e9b5

Struts Fix OGNL Remote Code Execution CVE-2011-3923

pom.xml

+1 -1

xwork-core/src/main/java/com/opensymphony/xwork2/interceptor/ParametersInterceptor.java

+2 -2

xwork-core/src/main/java/com/opensymphony/xwork2/ognl/OgnlUtil.java

+3 -19

xwork-core/src/main/java/com/opensymphony/xwork2/ognl/OgnlValueStack.java

+3 -16

xwork-core/src/main/java/com/opensymphony/xwork2/util/ValueStack.java

-8

xwork-core/src/test/java/com/opensymphony/xwork2/StubValueStack.java

-4

xwork-core/src/test/java/com/opensymphony/xwork2/interceptor/ParametersInterceptorTest.java

-32