GHSA-29RM-6752-GVWV Code execution in Apache Struts 1 plugin
The Struts 1 plugin used with Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage...
9.8CVSS7.4AI score0.99396EPSS
SaveExploits42References10
RedhatCVE•added 2017/07/10 7:19 p.m.•49 views
CVE-2017-9791
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage...