CVE-2016-4430

Name of the Vulnerable Software and Affected Versions Apache Struts 2 versions 2.3.20 through 2.3.28.1

Description The issue is related to token validation mishandling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks. This is due to incorrect token validation in Apache Struts 2.

Recommendations For Apache Struts 2 versions 2.3.20 through 2.3.28.1, update to a version that correctly handles token validation to prevent CSRF attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.