CVE-2014-7809
Beschrijving
Apache Struts 2.0.0 through 2.3.x before 2.3.20 uses predictable <s /> values, which allows remote attackers to bypass the CSRF protection mechanism.
Apache Struts 2.0.0 through 2.3.x before 2.3.20 uses predictable <s /> values, which allows remote attackers to bypass the CSRF protection mechanism.