Exploit for Deserialization of Untrusted Data in Apache Struts

apache-struts-pwn - CVE-2017-9805 Exploit ============ An...

PT-2017-4235 · Red Hat · Red Hat Jboss Application Server +1

Name of the Vulnerable Software and Affected Versions: Red Hat JBoss Application Server versions as shipped with Red Hat Enterprise Application Platform 5.2 Description: The issue is related to the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker, which does not restrict classes fo...