A remote code execution vulnerability exists in Apache Struts 2 (S2-046). A remote attacker could exploit this vulnerability by sending certain crafted HTTP request. A successful attack could execute arbitrary code on the target server with the privilege of the web server.