Vulnerability record: CVE-2020-17530 in apache/struts (version 2.5.25)
Weakness: CWE-094 \u2014 Improper Control of Generation of Code ('Code Injection')
GitHub Security Advisory: GHSA-jc35-q369-45pv
Repository: https://github.com/apache/struts
Buggy commit: b3a9d82d5830ef9cd7811cfa3f86a373ae52fada
Fix commit(s): 45667346629455f7ea125bff36bf9b763b7e8463