VDB

GCVE-110-MAGEIA-2014-219

GCVE-110-MAGEIA-2014-219
Advisory Published
Vulnetix · Advisory published May 14, 2014
Updated struts packages fix security vulnerability: It was found that the Struts 1 ActionForm object allowed access to the 'class' parameter, which is directly mapped to the getClass() method. A remote attacker could use this flaw to manipulate the ClassLoader used by an application server running Struts 1. This could lead to remote code execution under certain conditions (CVE-2014-0114).

Affected Products

VendorProductVersionsPlatforms
Mageiastruts0 (affected), 1.3.10-3.1.mga3 (unaffected)
Mageiastruts0 (affected), 1.3.10-4.1.mga4 (unaffected)

Browse GCVE Records

73,280 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›