Lucene search
GoogleOSV:GHSA-4PRJ-VW9J-V6PRHistoryMay 14, 2022 - 12:54 a.m.
Arbitrary code execution in Apache Struts 2
2022-05-1400:54:13
Google
osv.dev
15
apache struts 2
rest plugin
arbitrary code execution
EPSS
0.067
Percentile
93.9%
The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression.
References
jvn.jp/en/jp/JVN07710476/index.html
jvndb.jvn.jp/jvndb/JVNDB-2016-000110
bugzilla.redhat.com/show_bug.cgi?id=1348238
github.com/apache/struts
github.com/apache/struts/commit/6d7ac40dcede1793a4534a3dc249fd562d495e8c
github.com/apache/struts/commit/76eb8f38a33ad0f1f48464ee1311559c8d52dd6d
github.com/apache/struts/commit/c9c21378f2fb2ff21355c128c45e106ebd87ad7c
github.com/apache/struts/commit/deefeffd11425f0cd0b797cd86a9b3550234262b
nvd.nist.gov/vuln/detail/CVE-2016-4438
struts.apache.org/docs/s2-037.html
Related
dsquare
dsquare
Apache Struts REST Plugin OGNL Expression Handling RCE
2018-04-20 00:00:00
jvn
jvn
JVN#07710476: Apache Struts 2 vulnerable to remote code execution
2016-06-20 00:00:00
ubuntucve
ubuntucve
CVE-2016-4438
2016-07-04 00:00:00
github
github
Arbitrary code execution in Apache Struts 2
2022-05-14 00:54:13
nessus
nessus
Apache Struts 2 REST Plugin OGNL Expression Handling RCE
2016-06-24 00:00:00
Apache Struts 2.x < 2.3.29 Multiple Vulnerabilities (S2-035 - S2-040)
2016-06-24 00:00:00
nvd
nvd
CVE-2016-4438
2016-07-04 22:59:09
cve
cve
CVE-2016-4438
2016-07-04 22:59:09
seebug
seebug
Struts2 remote code execution vulnerability S2-037）
2016-06-16 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Struts REST plugin Remote Code Execution (CVE-2016-4438)
2016-06-23 00:00:00
redhatcve
redhatcve
CVE-2016-4438
2016-07-06 03:21:21
cvelist
cvelist
CVE-2016-4438
2016-07-04 22:00:00
f5
f5
K15168792 : Apache Struts 2 vulnerability CVE-2016-4438
2016-06-24 00:00:00
SOL15168792 - Apache Struts 2 vulnerability CVE-2016-4438
2016-06-24 00:00:00
prion
prion
Design/Logic Flaw
2016-07-04 22:59:00
openvas
openvas
Apache Struts Security Update (S2-037, S2-038, S2-039, S2-040)
2016-11-18 00:00:00
myhack58
myhack58
ibm
ibm
oracle
oracle
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00