CVE-2013-2135

Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted value that contains both "${}" and "%{}" sequences, which causes the OGNL code to be evaluated twice.

• CWE-94

• http://struts.apache.org/development/2.x/docs/s2-015.htmlVendor Advisory
• http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.htmlThird Party Advisory
• http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.htmlThird Party Advisory
• http://www.securityfocus.com/bid/64758Third Party Advisory, VDB Entry
• https://cwiki.apache.org/confluence/display/WW/S2-015Vendor Advisory
• http://struts.apache.org/development/2.x/docs/s2-015.htmlVendor Advisory
• http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.htmlThird Party Advisory
• http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.htmlThird Party Advisory
• http://www.securityfocus.com/bid/64758Third Party Advisory, VDB Entry
• https://cwiki.apache.org/confluence/display/WW/S2-015Vendor Advisory

Published

Jul 16, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2129Cross-site scripting (XSS) vulnerability in the Webform modu…
• CVE-2013-2130ZNC 1.0 allows remote authenticated users to cause a denial …
• CVE-2013-2131Format string vulnerability in the rrdtool module 1.4.7 for …
• CVE-2013-2132bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo…
• CVE-2013-2133The EJB invocation handler implementation in Red Hat JBossWS…
• CVE-2013-2134Apache Struts 2 before 2.3.14.3 allows remote attackers to e…
• CVE-2013-2136Multiple cross-site scripting (XSS) vulnerabilities in Apach…
• CVE-2013-2137Cross-site scripting (XSS) vulnerability in the "View Log" s…
• CVE-2013-2138The (1) uploadify and (2) flowplayer SWF files in Gallery 3 …
• CVE-2013-2139Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earli…
• CVE-2013-2140The dispatch_discard_io function in drivers/block/xen-blkbac…
• CVE-2013-2141The do_tkill function in kernel/signal.c in the Linux kernel…