CVE-2008-6504

CVE-2008-6504 affects OpenSymphony XWork (ParameterInterceptor) used in Apache Struts: OGNL refs to # context objects are not properly restricted, enabling remote OGNL evaluation and modification of server-side objects. Affected: XWork 2.0.x prior to 2.0.6 and 2.1.x prior to 2.1.2; vulnerability ...

CVE-2008-6504

creationtimestamp| type| source ---|---|--- 2008-11-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32564 2025-02-18 15:34:33+00:00| seen| https://gist.github.com/jpmartins-ca/4200d476e327a22a046f19199e252871...