study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095

Struts2의 취약성 S2-054, S2-055 및 Jackson의 취약성 CVE-2017-7525, CVE-2017-15095 조사 보고 요점만 정리하여 읽기 쉽게 만든 요약 기사를 공개했습니다. 먼저 개요를 알고 싶거나 시간이 없는 분들께 추천합니다. SSTtechlog 08 S2-054, S2-055 및 jackson-databind의 취약성 CVE-2017-7525, CVE-2017-15095에 대해 | SST 주식회사 시큐어스카이 테크놀로지...

Apache Struts 2.5.x < 2.5.14.1 Json-lib JSON Parsing Unspecified DoS (S2-054) (S2-055)

The version of Apache Struts running on the remote host is 2.5.x prior to 2.5.14.1. It is, therefore, affected by an unspecified flaw that is triggered when parsing JSON. This allows a remote attacker to cause a denial of service. Note that Nessus has not tested for these issues but has instead...

Apache Struts2 S2-054(CVE-2017-15707)

Summary A crafted JSON request can be used to perform a DoS attack when using the Struts REST plugin | | | | :------------ | :------------ | | Who should read this | All Struts 2 developers and users which are using the REST plugin | | Impact of vulnerability | A DoS attack is possible when using...