Security Advisory
CVE-2012-4387
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name, which is processed as an OGNL expression.