Lucene search
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_113226HistoryMay 18, 2022 - 12:00 a.m.
Apache Struts 2.x < 2.5.29 Remote Code Execution (S2-062)
2022-05-1800:00:00
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
26
The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the tag’s attributes could perform a double evaluation if a developer applied forced OGNL evaluation by using the %{…} syntax. Using forced OGNL evaluation on untrusted user input can lead to a Remote Code Execution and security degradation.
No source dataRelated
githubexploit
githubexploit
Exploit for Expression Language Injection in Apache Struts
2020-12-09 09:53:08
Exploit for Expression Language Injection in Apache Struts
2020-12-08 11:10:46
Exploit for Expression Language Injection in Apache Struts
2021-01-24 07:51:31
nessus
nessus
Apache Struts 2.0.0 < 2.5.26 Possible Remote Code Execution vulnerability (S2-061)
2021-07-06 00:00:00
Apache Struts 2.x < 2.5.26 RCE (S2-061)
2020-12-09 00:00:00
F5 Networks BIG-IP : Apache Struts vulnerabilities (K24608264)
2023-11-03 00:00:00
saint
saint
Apache Struts forced OGNL evaluation incomplete fix
2022-04-26 00:00:00
Apache Struts forced OGNL evaluation incomplete fix
2022-04-26 00:00:00
atlassian
atlassian
Update Apache Struts 2 to avoid CVE-2020-17530
2021-02-22 11:35:48
Update Apache Struts 2 to avoid CVE-2020-17530
2021-02-22 11:35:48
prion
prion
Remote code execution
2020-12-11 02:15:00
Remote code execution
2022-04-12 16:15:00
cve
cve
CVE-2020-17530
2020-12-11 02:15:00
CVE-2021-31805
2022-04-12 16:15:00
github
github
Remote code execution in Apache Struts
2022-02-09 22:51:56
Expression Language Injection in Apache Struts
2022-04-13 00:00:30
Bypassing OGNL sandboxes for fun and charities
2023-01-27 16:00:49
ibm
ibm
osv
osv
Remote code execution in Apache Struts
2022-02-09 22:51:56
CVE-2020-17530
2020-12-11 02:15:10
Expression Language Injection in Apache Struts
2022-04-13 00:00:30
jvn
jvn
JVN#43969166: Apache Struts 2 vulnerable to remote code execution (S2-061)
2020-12-11 00:00:00
ubuntucve
ubuntucve
CVE-2020-17530
2020-12-11 00:00:00
CVE-2021-31805
2022-04-12 00:00:00
openvas
openvas
Apache Struts Security Update (S2-061) - Active Check
2021-04-22 00:00:00
Apache Struts Security Update (S2-061) - Version Check
2020-12-14 00:00:00
Apache Struts Security Update (S2-062) - Active Check
2022-05-04 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Struts Remote Code Execution (CVE-2020-17530)
2020-12-21 00:00:00
cisa
cisa
Apache Releases Security Update for Apache Struts 2
2020-12-08 00:00:00
qualysblog
qualysblog
Apache Struts 2 Double OGNL Evaluation Vulnerability (CVE-2020-17530)
2021-09-21 14:40:00
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
cisa_kev
cisa_kev
Apache Struts Remote Code Execution Vulnerability
2021-11-03 00:00:00
nuclei
nuclei
Apache Struts 2.0.0-2.5.25 - Remote Code Execution
2021-01-27 18:47:58
Apache Struts2 S2-062 - Remote Code Execution
2022-04-18 11:08:19
veracode
veracode
Remote Code Execution
2020-12-09 05:42:42
Remote Code Execution (RCE)
2022-04-13 04:46:59
redhatcve
redhatcve
CVE-2020-17530
2020-12-08 19:34:44
CVE-2021-31805
2022-04-13 06:28:32
metasploit
metasploit
Apache Struts 2 Forced Multi OGNL Evaluation
2020-12-16 00:17:35
attackerkb
attackerkb
CVE-2021-31805
2022-04-12 00:00:00
CVE-2020-17530
2020-12-11 00:00:00
packetstorm
packetstorm
Apache Struts 2 Forced Multi OGNL Evaluation
2020-12-24 00:00:00
zdt
zdt
Apache Struts 2 Forced Multi OGNL Evaluation Exploit
2020-12-24 00:00:00
f5
f5
Apache Struts vulnerabilities CVE-2020-17530 and CVE-2021-31805
2020-12-22 01:45:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-01-08 19:54:36
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00
Related for WEB_APPLICATION_SCANNING_113226