4.0.0 org.example CVE-2025-68493 1.0-SNAPSHOT war CVE-2025-68493 PoC UTF-8 8 8 2.5.25 org.apache.struts struts2-core ${struts2.version} commons-collections commons-collections 3.2.2 javax.servlet javax.servlet-api 3.1.0 provided CVE-2025-68493