Information from NEC Corporation

Vulnerability ID:JVN#65044642
Title:Apache Struts 1 vulnerable to input validation bypass
Status:Vulnerable, investigating

This is a statement from the vendor itself with no modification by JPCERT/CC.