Lucene search

K
prionPRIOn knowledge basePRION:CVE-2012-0393
HistoryJan 08, 2012 - 3:55 p.m.

Design/Logic Flaw

2012-01-0815:55:00
PRIOn knowledge base
www.prio-n.com
4

7 High

AI Score

Confidence

Low

0.919 High

EPSS

Percentile

98.9%

The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object.

CPENameOperatorVersion
strutsge2.1.0
strutslt2.3.1.1

7 High

AI Score

Confidence

Low

0.919 High

EPSS

Percentile

98.9%