CVE-2013-4316: Code Injection
Published Sep 30, 2013
·Updated
Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.
Affected Software
58 affected componentsFixes available
maven/org.apache.struts:struts2-rest-plugin>=2.0.0<2.3.15.2
2.3.15.2
maven/org.apache.struts:struts2-core>=2.0.0<2.3.15.2
2.3.15.2
Apache struts=2.0.0
Apache struts=2.0.1
Apache struts=2.0.2
Apache struts=2.0.3
Apache struts=2.0.4
Apache struts=2.0.5
Apache struts=2.0.6
Apache struts=2.0.7
Apache struts=2.0.8
Apache struts=2.0.9
Apache struts=2.0.10
Apache struts=2.0.11
Apache struts=2.0.11.1
Apache struts=2.0.11.2
Apache struts=2.0.12
Apache struts=2.0.13
Apache struts=2.0.14
Apache struts=2.1.0
Apache struts=2.1.1
Apache struts=2.1.2
Apache struts=2.1.3
Apache struts=2.1.4
Apache struts=2.1.5
Apache struts=2.1.6
Apache struts=2.1.8
Apache struts=2.1.8.1
Apache struts=2.2.1
Apache struts=2.2.1.1
Apache struts=2.2.3
Apache struts=2.2.3.1
Apache struts=2.3.1
Apache struts=2.3.1.1
Apache struts=2.3.1.2
Apache struts=2.3.3
Apache struts=2.3.4
Apache struts=2.3.4.1
Apache struts=2.3.7
Apache struts=2.3.8
Apache struts=2.3.12
Apache struts=2.3.14
Apache struts=2.3.14.1
Apache struts=2.3.14.2
Apache struts=2.3.14.3
Apache struts=2.3.15
Apache struts=2.3.15.1
Oracle FLEXCUBE Private Banking=1.7
Oracle FLEXCUBE Private Banking=2.0
Oracle FLEXCUBE Private Banking=2.0.1
Oracle FLEXCUBE Private Banking=2.2.0.1
Oracle FLEXCUBE Private Banking=3.0
Oracle FLEXCUBE Private Banking=12.0.1
Oracle FLEXCUBE Private Banking=12.0.2
Oracle MySQL Enterprise Monitor<=2.3.14
Oracle MySQL Enterprise Monitor<=3.0.4
Oracle WebCenter Sites=11.1.1.6.1
Oracle WebCenter Sites=11.1.1.8.0
Remediation
Patch Available
Event History
Sep 30, 2013
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
May 17, 2022
Advisory Published
03:28 AM
Frequently Asked Questions
1
What is the severity of CVE-2013-4316?
The severity of CVE-2013-4316 is currently classified as unknown due to the lack of specific details regarding its impact and attack vectors.
2
How do I fix CVE-2013-4316?
To fix CVE-2013-4316, upgrade to Apache Struts version 2.3.15.2 or later.
3
Which versions of Apache Struts are affected by CVE-2013-4316?
CVE-2013-4316 affects Apache Struts versions from 2.0.0 through 2.3.15.1.
4
Can CVE-2013-4316 be exploited remotely?
The specific attack vectors for CVE-2013-4316 are unknown, making it difficult to confirm if it can be exploited remotely.
5
What is Dynamic Method Invocation in the context of CVE-2013-4316?
Dynamic Method Invocation is a feature in Apache Struts that allows dynamic execution of actions and may pose security risks if not properly managed.