You are reporting the paste Apache Struts2 <= 2.3.1 Multiple Vulnerabilities.