CVE-2017-9791: Apache Struts 1 Improper Input Validation Vulnerability
The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attribution