Describe CVE-2014-7809.
What is CVE-2014-7809?
Apache Struts 2.0.0 through 2.3.x before 2.3.20 uses predictable <s:token/> values, which allows remote attackers to bypass the CSRF protection mechanism..