Apache Struts 2 Vulnerability Explained in Plain English
tinfoilsecurity.com