SUSE CVE-2012-0391

🗓️ 15 Feb 2023 05:49:08Reported by Suse CVEType

Struts ExceptionDelegator interprets parameters as OGNL during error handling, enabling remote code execution.

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: Order Management could be subject to an Apache Struts vulnerability that could allow a remote attacker to execute arbitrary code on the system.	12 Apr 202417:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Call Center and Apache Struts Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Order Management Apache Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:45	–	ibm
0day.today	Apache Struts 2.2.1.1 Remote Command Execution	5 Jun 201200:00	–	zdt
ATTACKERKB	CVE-2012-0391	8 Jan 201200:00	–	attackerkb
BDU FSTEC	The vulnerability of the ExceptionDelegator component in the Apache Struts software framework allows a hacker to execute arbitrary code.	7 Sep 202100:00	–	bdu_fstec
Circl	CVE-2012-0391	6 Jan 201200:00	–	circl
CISA KEV Catalog	Apache Struts 2 Improper Input Validation Vulnerability	21 Jan 202200:00	–	cisa_kev
CISA	CISA Adds Four Known Exploited Vulnerabilities to Catalog	21 Jan 202200:00	–	cisa
Check Point Advisories	Apache Struts 2 ConversionErrorInterceptor OGNL Script Injection (CVE-2012-0391)	16 Apr 201200:00	–	checkpoint_advisories