Read article, Exploiting OGNL Injection in Apache Struts by Ionut Popescu, published Mar 14, 2019.