Lucene search
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_112741HistoryApr 12, 2021 - 12:00 a.m.
Apache Struts 2.x < 2.3.15.1 Remote Code Execution (S2-016)
2021-04-1200:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
156
Apache Struts 2.x to 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted ‘action:’, ‘redirect:’, or ‘redirectAction:’ prefix.
This mechanism was intended to help with attaching navigational information to buttons within forms.
No source data