A vulnerability classified as critical has been found in Apache Struts up to 2.3.15. This affects an unknown function of the component DefaultActionMapper. The manipulation of the argument action: / redirect: / redirectAction: with an unknown input leads to a buffer overflow vulnerability. This is going to have an impact on confidentiality, integrity, and availability.