Apache Struts 'TextParseUtil.translateVariables' RCE Vulnerability (S2-027) - Linux

Apache Struts is prone to a remote code execution RCE vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2016-3090

The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling...

CVE-2016-3090: Improper Input Validation

The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling...

PT-2017-8329

Name of the Vulnerable Software and Affected Versions Apache Struts versions prior to 2.3.20 Description The issue allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling. This is made possible by the TextParseUtil.translateVariables method in Apache...