Apache Struts 2 REST Plugin provided by The Apache Software Foundation contains an issue that @StrutsParameter authorization does not apply to Jackson @JsonAnySetter members.
Apache Struts 2 REST Plugin: @StrutsParameter checks do not cover @JsonAnySetter https://jvn.jp/en/jp/JVN82782759/ Apache Struts 2 REST Plugin provided by The Apache Software Foundation contains an issue that @StrutsParameter authorization does not apply to Jackson @JsonAnySetter members. JVN [email protected] JVN#82782759 https://jvn.jp/en/jp/JVN82782759/ 2026-10-29T12:00:00+09:00 2026-10-29T12:00:00+09:00 2026-10-29T12:00:00+09:00