2 matches found
Apache Struts 'TextParseUtil.translateVariables' RCE Vulnerability (S2-027) - Linux
Apache Struts is prone to a remote code execution RCE vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
8.8CVSS8.8AI score0.05709EPSS
SaveExploits0References2
CVE-2016-3090: Improper Input Validation
The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling...
8.8CVSS8.4AI score0.05709EPSS
SaveExploits0References2
20