Lucene search
K

8 matches found

GithubExploit
GithubExploit
added 2022/04/15 1:50 a.m.793 views

Exploit for Expression Language Injection in Apache Struts

s2-062 Remote code execution for S2-062 CVE-2021-31805 – Ver...

9.8CVSS7.5AI score0.93788EPSS
Exploits7
Qualys Blog
Qualys Blog
added 2021/09/21 2:40 p.m.193 views

Apache Struts 2 Double OGNL Evaluation Vulnerability (CVE-2020-17530)

A vulnerability CVE-2020-17530 discovered last year in the Object Graph Navigation Language OGNL evaluation function of Apache Struts versions 2.0.0 – 2.5.25 can be exploited by attackers to perform remote code execution. This RCE vulnerability doesn’t come packaged with Apache struts but is...

7.5CVSS10AI score0.94373EPSS
Exploits11
Tenable Nessus
Tenable Nessus
added 2021/07/06 12:0 a.m.169 views

Apache Struts 2.0.0 < 2.5.26 Possible Remote Code Execution vulnerability (S2-061)

The version of Apache Struts installed on the remote host is prior to 2.5.26. It is, therefore, affected by a vulnerability as referenced in the S2-061 advisory. - Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software :...

9.8CVSS7.6AI score0.94373EPSS
Exploits11References2
Tenable Nessus
Tenable Nessus
added 2021/04/29 12:0 a.m.39 views

Apache Struts 2.x < 2.5.26 Remote Code Execution (S2-061)

Apache Struts 2.0.0 to 2.5.26 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. No source data...

9.8CVSS9.9AI score0.94373EPSS
Exploits11References2
GithubExploit
GithubExploit
added 2021/01/24 7:51 a.m.77 views

Exploit for Expression Language Injection in Apache Struts

CVE-2020-17530-s2-061 s2-061 graphical interface, only for f...

9.8CVSS7AI score0.94373EPSS
Exploits11
Tenable Nessus
Tenable Nessus
added 2020/12/17 12:0 a.m.43 views

Apache Struts 2.x < 2.5.26 RCE (S2-061) (direct check)

Binary data strutscve202017530.nbin...

9.8CVSS9.8AI score0.94373EPSS
Exploits11References3
OpenVAS
OpenVAS
added 2020/12/14 12:0 a.m.26 views

Apache Struts Security Update (S2-061) - Version Check

Apache Struts is prone to a remote code execution RCE vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

9.8CVSS9.6AI score0.94373EPSS
Exploits11References4
GithubExploit
GithubExploit
added 2020/12/10 5:42 p.m.88 views

Exploit for Expression Language Injection in Apache Struts

S2-061 The scripts are all written based on the vulhub’s struts...

9.8CVSS7AI score0.94373EPSS
Exploits11
Rows per page
Query Builder