CVE-2013-4310

medium

Apache

CVSS v3 Base Score

5.8

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS Score

8.7%

Exploitation probability in 30 days

Top 7% most likely to be exploited

Attack Characteristics

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

None

Published: September 30, 2013 (4609 days ago)

Last Modified: April 29, 2026

Vendor: Apache

Source: NVD

Description

Apache Struts 2.0.0 through 2.3.15.1 allows remote attackers to bypass access controls via a crafted action: prefix.

CWE-264

apache struts