CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Apache. Its EPSS score suggests a 96.1% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2014-0114
Severity
HIGH
CVSS
7.5
EPSS
96.12%
Apache
Original NVD Description
Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1.