CVE-2016-3081 — Apache Struts command injection vulnerability

The CISA Known Exploited Vulnerabilities Catalog includes CVE-2016-3081 as an Apache Struts command injection vulnerability. CISA describes the KEV Catalog as the authoritative source for vulnerabilities that have been exploited in the wild.