Apache Struts2 Core 7.4.0 and below allows arbitrary code execution via OGNL sandbox escape
The OGNL sandbox in Apache Struts2 Core 7.4.0 and below can be bypassed using nested arguments that invoke reflection, allowing arbitrary code execution.
45
Product
Struts2 Core
- Mentions · 7d0
- Mentions · 30d5
- All mentions5
- First seenNov 2, 2026
- Last mentioned9d ago
Timeline
5 articles · newest firstApache Struts2 Core TokenHelper uses timing side-channel for token comparisons
The token comparison in Apache Struts2 Core 7.4.0 and below uses early-exit functions like != or memcmp, creating a timing side-channel proportional to matching bytes.
30
Apache Struts2 Spring Plugin opens Spring ApplicationContext outside try-with-resources
The Spring Plugin in Apache Struts2 Core opens an ApplicationContext via try-with-resources but continues to use the closed resource, resulting in IllegalStateException.
15
Apache Struts2 Core Integer Overflow
Apache Struts2 Core up to version 7.4.0 fails to prevent integer overflows that cause wrap-arounds on downstream casting to types smaller than BigInteger.
35
Apache Struts2 Core cross-origin protection exemption miskeyed to deployment-wide path
Miskeyed exemptedPaths in Struts2 Core interceptors allows bypass of cross-origin protections for entire deployment
40