Lucene search

K
nessusTenable700055.PRM
HistoryApr 12, 2017 - 12:00 a.m.

Apache Struts 2 RCE (CVE-2017-5638) (deprecated)

2017-04-1200:00:00
Tenable
www.tenable.com
69

The remote web server is being targeted by an Apache Struts 2 exploitation attempt. Versions of Apache Struts 2.5.x prior to 2.5.10.1 and 2.3.x prior to 2.3.32 are affected by a flaw that is triggered when handling invalid Content-Type, Content-Disposition, or Content-Length values for uploaded files using the Jakarta Multipart parser. This may allow a remote attacker to potentially execute arbitrary code.

Binary data 700055.prm
VendorProductVersionCPE
apachestrutscpe:/a:apache:struts