Lucene search
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.STRUTS_CVE_2020_17530.NBINHistoryDec 17, 2020 - 12:00 a.m.
Apache Struts 2.x < 2.5.26 RCE (S2-061) (direct check)
2020-12-1700:00:00
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
32
The version of Apache Struts installed on the remote host is 2.x prior to 2.5.26. It is, therefore, affected by a a remote code execution vulnerability in its OGNL evaluation functionality due to insufficient validation of user input. An unauthenticated, remote attacker can exploit this to execute arbitrary commands on an affected host.
Binary data struts_cve_2020_17530.nbin