ACTIVELY EXPLOITED3 sources verified·1 min read
By Lyrie Threat Intelligence·1/21/2022
CVE-2012-0391 added to CISA KEV: Apache Struts 2
Status: ✅ Confirmed exploited in the wild
Date added: 2022-01-21
Required action: Apply updates per vendor instructions.
Due date: 2022-07-21
Why this matters
The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for remote code execution.
Sources
Lyrie Verdict
Lyrie's autonomous detection layer catches active exploitation primitives at machine speed — closing the gap between disclosure and weaponization that traditional defense simply can't cover.