Lucene search

K
dsquareDsquare SecurityE-339
HistoryOct 17, 2013 - 12:00 a.m.

Apache-Struts Showcase < 2.3.14.1 RCE Linux

2013-10-1700:00:00
Dsquare Security
19

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.008 Low

EPSS

Percentile

79.8%

Apache Struts Crafted Parameter Arbitrary OGNL Code Execution

Vulnerability Type: Remote Command Execution

For the exploit source code contact DSquare Security sales team.

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.008 Low

EPSS

Percentile

79.8%