cve-2023-50164

CVE-2023-50164 受影响版本 Struts 2.0.0 - Struts 2.3.37 EOL Struts 2.5.0 - Struts 2.5.32 Struts 6.0.0 - Struts 6.3.0 修复版本 Struts 2.5.33 Struts 6.3.0.2 搜索脚本 Windows/PowerShell 适用于 PowerShell 5.1 及更高版本。由 Kjetil Sigvartsen 在挪威卫生网络撰写。 root@kitploit: String$Extensions = @'.jar', '.war', '.ear'...

struts2-rce

CVE-2017-5638 漏洞利用演示 完全基于 https://github.com/piesecurity/apache-struts2-CVE-2017-5638 一个真实场景：将某个框架的参考项目部署到容器中，却引发了严重后果。请查看代码并编译以熟悉它。同时检查 Dockerfile——是否有任何特定内容引起了我们的注意？ 展示了日常决策和多个漏洞如何轻易地被串联利用。 使用方法： 前提条件： 1. 已安装 JDK， 2. 已安装 Docker，Docker Desktop for Mac 或 Win 3. 最好已安装 Python（可用 Jython 替代） 准备步骤： 1...

The vulnerability of the struts2-core library in the Apache Struts software platform allows attackers to induce a service failure.

The vulnerability of the struts2-core library of the Apache Struts software platform is related to errors during permission storage. Exploiting this vulnerability can allow an attacker to cause service failures using specially crafted files...

Security Bulletin: CVE-2020-17530 may affect Apache struts2-core used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary Vulnerability found in Apache struts2-core-2.5.22 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections Vulnerability Details CVEID: CVE-2020-17530 DESCRIPTION: Apache Struts could allo...

Remote Code Execution

struts2-core is vulnerable to remote code execution. Tag attributes can be used to perform a double evaluation when forced OGNL evaluation is applied, by using the %... syntax. This can lead to remote code execution when an attacker provides a malicious input to be evaluated...

Denial Of Service (DoS)

struts2-core is vulnerable to denial of service DoS. The vulnerability exists as when the uploaded file, exposed through a getter, through an Action is set to read-only, causing the subsequent actions on the file to give an error...

Remote Code Execution (RCE)

struts2-core is vulnerable to remote code execution RCE. The vulnerability exists through the possibility of a forced double OGNL expression through the $itemValue expression in simple/radiomap.ftl...

Directory Traversal

struts2-core is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of sanitization in file path, allowing ..%252f to be used in the file path to perform directory traversal attacks...

Cross-site Scripting (XSS)

struts2-core is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the improper handling of double quote characters in the href attribute of the s:a tag, as well as the parameters in the action attribute of the s:url tag, allowing XSS attacks...

Remote Code Execution (RCE)

struts2-core is vulnerable to remote code execution RCE attacks. These attacks are possible when using a namespace or url tag which doesn't have a value and action set and where its upper action configuration is using a wildcard namespace or has no namespace...

Remote Code Execution (RCE)

struts2-core is vulnerable to remote code execution attacks. The vulnerability exists when expression literals, or forcing expression in Freemarker tags, are used as request values. The default Freemark configuration allows ObjectConstructor, Execurt, and freemarker.template.utility.JythonRuntime...

Regular Expression Denial Of Service (ReDoS)

struts2-core and xwork-core are vulnerable to regular expression denial of service ReDoS attacks. When the URLValidator is used it is possible to overload the server process through an attacker controlled URL. These attacks are as a result of an incomplete fix for CVE-2017-7672...

Remote Code Execution (RCE) Through Jakarta Multipart Parser

struts2-core is vulnerable to remote code execution RCE. The vulnerability exists due to the improper handling on the Content-Type header when an invalid Content-Type is received, in conjunction with the use of the Jakarta based file upload Multipart parser. An exception will be thrown on invalid...