Lucene search
HistoryJul 10, 2013 - 7:55 p.m.
CVE-2013-1965
cve-2013-1965
apache struts
showcase app
remote code execution
ognl code
nvd
8.1 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.008 Low
EPSS
Percentile
81.6%
Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache:struts | apache struts | lt | 2.3.14.1 |
| apache:struts2-showcase | apache struts2-showcase | le | 2.3.13 |
Related
nessus
nessus
dsquare
dsquare
Apache-Struts Showcase < 2.3.14.1 RCE Linux
2013-10-17 00:00:00
ubuntucve
ubuntucve
CVE-2013-1965
2013-07-10 00:00:00
openvas
openvas
Apache Struts Security Update (S2-012) - Active Check
2012-08-31 00:00:00
Apache Struts Security Update (S2-012, S2-015) - Version Check
2021-09-14 00:00:00
prion
prion
Design/Logic Flaw
2013-07-10 19:55:00
osv
osv
Improper Control of Generation of Code in Apache Struts
2022-05-14 00:54:15
github
github
Improper Control of Generation of Code in Apache Struts
2022-05-14 00:54:15
nuclei
nuclei
Apache Struts2 S2-012 RCE
2021-02-22 12:28:11
wallarmlab
wallarmlab
New Struts2 Remote Code Execution exploit caught in the wild
2017-03-09 00:15:54
8.1 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.008 Low
EPSS
Percentile
81.6%
Related for CVE-2013-1965