rapid7/metasploit-framework — pull request #1870 by Console (2013-05-28 17:36:06+00:00)
Title: Struts <= 2.3.14.1 remote code execution

Heavily based upon my previous module for parametersinterceptor RCE

Tested against the POC given at: https://cwiki.apache.org/confluence/display/WW/S2-014 in CentOS 6.4 with Apache Struts 2.3.8