Apache Struts Command Injection Vulnerability. Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled. Apply vendor mitigations.

Check the NVD record and the vendor advisory for affected versions and the patch.