Summary

Apache Struts does not properly validate rejected reasons in certain situations, potentially allowing an attacker to bypass authentication and gain unauthorized access to sensitive data. This issue affects systems running Apache Struts, which can be exploited by malicious users. Update to the latest version of Apache Struts to mitigate this issue.