Lucene search
HistoryJul 10, 2013 - 7:55 p.m.
CVE-2013-1965
cve-2013-1965
apache struts
showcase app
remote code execution
ognl code
nvd
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.9%
Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.
Affected configurations
Node
apachestrutsRange2.0.0–2.3.14.1
ORapachestruts2-showcaseRange2.0.0–2.3.13
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache:struts | apache struts | lt | 2.3.14.1 |
| apache:struts2-showcase | apache struts2-showcase | le | 2.3.13 |
Related
nessus
nessus
nvd
nvd
CVE-2013-1965
2013-07-10 19:55:04
dsquare
dsquare
Apache-Struts Showcase < 2.3.14.1 RCE Linux
2013-10-17 00:00:00
nuclei
nuclei
Apache Struts2 S2-012 RCE
2021-02-22 12:28:11
github
github
Improper Control of Generation of Code in Apache Struts
2022-05-14 00:54:15
osv
osv
Improper Control of Generation of Code in Apache Struts
2022-05-14 00:54:15
prion
prion
Design/Logic Flaw
2013-07-10 19:55:00
cvelist
cvelist
CVE-2013-1965
2013-07-10 19:00:00
openvas
openvas
Apache Struts Security Update (S2-012) - Active Check
2012-08-31 00:00:00
Apache Struts Security Update (S2-012, S2-015) - Version Check
2021-09-14 00:00:00
ubuntucve
ubuntucve
CVE-2013-1965
2013-07-10 00:00:00
wallarmlab
wallarmlab
New Struts2 Remote Code Execution exploit caught in the wild
2017-03-09 00:15:54
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.9%
Related for CVE-2013-1965