Lucene search

K
cvelistMitreCVELIST:CVE-2012-0393
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-0393

2022-10-0316:15:38
mitre
www.cve.org
apache struts
parameterinterceptor
file overwrite
cve-2012-0393

9 High

AI Score

Confidence

High

0.919 High

EPSS

Percentile

98.9%

The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object.

9 High

AI Score

Confidence

High

0.919 High

EPSS

Percentile

98.9%