Apache Struts OGNL Injection via Content-Type or URI

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•5

Detects attempts to exploit Apache Struts vulnerabilities by identifying OGNL (Object-Graph Navigation Language) expressions (starting with %{ or ${) within the Content-Type HTTP header, combined with requests to .action or .do endpoints.