be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +232 more potentially affected by CVE-2016-4003 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.24.3)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.0, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2016-4003 Source advisory: MEND:CVE-2016-4003...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +230 more potentially affected by CVE-2016-0785 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.20.1)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.0, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2016-0785 Source advisory: MEND:CVE-2016-0785...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=2.0.2, <=2.0.4), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=2.0.2, <=2.0.4) +42 more potentially affected by CVE-2016-0785 via org.apache.struts:struts2-core (>=2.3.24, <=2.3.24.1)

org.apache.struts:struts2-core MAVEN version =2.3.24, =2.0.2, =2.0.2, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24.1 and more Source cves: CVE-2016-0785 Source advisory: MEND:CVE-2016-0785...

S2-0 2 9 Struts2 tag remote code execution analysis with POC-the exploit-warning-the black bar safety net

Struts2 tag library provides themes, templates support, which greatly simplifies the view of a page of writing, and, struts2 theme, the template provides a good scalability. To achieve a better code reuse. Struts2 allows the page to use a custom component, which can fully meet the project page...

Struts2 S2-0 2 9 remote code execution vulnerability: a preliminary study-vulnerability warning-the black bar safety net

0×0 1 Struts2 tag library Struts2 tag libraries to use OGNL expression to access the ActionContext object in the data. In order to be able to access to the ActionContext in the variable, Struts2 the ActionContext is set to OGNL context, and the OGNL with objects added to the ActionContext. In...

Apache Struts 2 远程命令执行漏洞(S2-029)

来源：@阿里云誉反欺诈 http://www.freebuf.com/vuls/99234.html 0×01 Struts2标签库 Struts2的标签库使用OGNL表达式来访问ActionContext中的对象数据。为了能够访问到ActionContext中的变量，Struts2将ActionContext设置为OGNL的上下文，并将OGNL的跟对象加入ActionContext中。 在Struts2中，如下的标签就调用了OGNL进行取值。 parameters: Struts2会解析value中的值，并当作OGNL表达式进行执行，获取到parameters对象的msg属性。...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +230 more potentially affected by CVE-2015-1831 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.20)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.0, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2015-1831 Source advisory: MEND:CVE-2015-1831...

br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.4, <=3.0.1) +222 more potentially affected by CVE-2015-1831 via org.apache.struts.xwork:xwork-core (>=2.2.1, <=2.3.20)

org.apache.struts.xwork:xwork-core MAVEN version =2.2.1, =2.0.0, =1.2.4, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.0, =1.0, =1.0, =1.0, =2.0.0, =2.2.1 and more Source cves: CVE-2015-1831 Source advisory: MEND:CVE-2015-1831...

用友软件旗下一网站存在一个Struts2漏洞可拿服务器

简要描述： 用友软件旗下一网站存在一个Struts2漏洞可拿服务器。主要因为漏洞不及时打上，账户权限过大。 详细说明： 今天闲来无事，在网上随意点了几下，发下了个漏洞。 存在漏洞的网址：http://pu.yonyouup.cn/login!loginIndexPage.action 漏洞证明： 首先，这是存在漏洞的网页：http://pu.yonyouup.cn/ 点进去后，会跳转到http://pu.yonyouup.cn/login!loginIndexPage.action ，于是我就猜想，是不是存在Struts2漏洞呢？就试了一下。 结果如图：...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +224 more potentially affected by CVE-2014-7809 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.16.3)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.0, =1.0, =1.0, =1.0, =2.0.0, =0.5.9, =0.5.10.2 and more Source cves: CVE-2014-7809 Source advisory: MEND:CVE-2014-7809...

某版本JEECMS后台存在通用struts2命令执行漏洞可批量getshell

简要描述： 某版本JEECMS后台存在通用struts2命令执行漏洞。 可通过谷歌搜索关键字inurl:login/jeecms.do,可获得多个存在st2的漏洞网站！ 详细说明： 漏洞网站太多，以下只列举了几例 img src="https://images.seebug.org/upload...

金蝶旗下某业务通讯监控系统命令执行

简要描述： title 详细说明： null 漏洞证明： 万恶的struts2框架～ 金蝶已经差不多补全了！但是还是有一些没有被注意到。 问题出在： http://comm.youshang.com/login.do 图片为域名对应IP： 已shell：...

Security Advisory-Apache Struts2 vulnerability on Huawei multiple products

Some versions of Apache Struts2 software used in Huawei devices have security vulnerabilities. A patch released for the software to fix vulnerabilities CVE-2014-0050 and CVE-2014-0094 has the risk of being bypassed. Vulnerability ID: HWPSIRT-2014-0420 This Vulnerability has been assigned Common...

VMware vCenter Operations Management Suite Multiple Vulnerabilities (VMSA-2014-0007)

The version of vCenter Operations Manager installed on the remote host is prior to 5.8.2. It is, therefore, affected by the following vulnerabilities : - An error exists in the included Apache Tomcat version related to handling 'Content-Type' HTTP headers and multipart requests such as file uploa...

Struts2/XWork < 2.2.0 - Remote Command Execution Vulnerability

漏洞详情 在struts2中，DefaultActionMapper类支持以"action:"、"redirect:"、"redirectAction:"作为导航或是重定向前缀，但是这些前缀后面同时可以跟OGNL表达式，由于struts2没有对这些前缀做过滤，导致利用OGNL表达式调用java静态方法执行任意系统命令。 这里以“redirect:”前缀举例，struts2会将“redirect:”前缀后面的内容设置到redirect.location当中，这里我们一步步跟踪，首先是这个getMapping函数跟入 这里一直到这个handleSpecialParameters，继续跟入...

br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.4, <=3.0.1) +145 more potentially affected by CVE-2014-0096 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.53)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =0.9.0, =0.9.0, =1.0.0 and more Source cves: CVE-2014-0096 Source advisory: MEND:CVE-2014-0096...

struts2 high-risk vulnerabilities, or may lead the Internet Security disaster-vulnerability warning-the black bar safety net

2 0 1 3 year 7 month 1 7 day is a many security operations, hackers sleepless nights...... Struts2 high-risk vulnerabilities to cause massive information leakage will affect countless Internet users, probably no one will be spared......） To exploit the vulnerability, a hacker can initiate remote...

STRUTS2 S2-0 2 0 patch bypass vulnerability-vulnerability warning-the black bar safety net

0×0 0 background Security researchers noted that the Apache Struts2 vulnerability Bulletin S2-0 2 0, in process repair CVE-2 0 1 4-0 0 9 4 bug fixes program vulnerability exists, resulting patch is completely bypassed. 0×0 1 Analysis Struts2 S2-0 2 0 was added .\.|^ class\.. to filter action...

大汉版通JACT系统存在s2-020

简要描述： struts2补丁不及时。 详细说明： 大汉版通JACT系统使用的struts2存在s2-020漏洞，该漏洞在一定条件会为系统带来较大安全风险。例如当系统部署在Tomcat下时，class.classLoader.resources.dirContext.docBase可被任意赋值从而导致网站不可用或者文件下载等，如果Tomcat是运行在windows系统下则还可能造成远程代码执行。更多内容参考：http://drops.wooyun.org/papers/1377 PS:附送任意文件下载一枚：...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +224 more potentially affected by CVE-2014-0116 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.16.3)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.0, =1.0, =1.0, =1.0, =2.0.0, =0.5.9, =0.5.10.2 and more Source cves: CVE-2014-0116 Source advisory: MEND:CVE-2014-0116...