Skip to content
NewA calmer, faster ZeroHour

Expert discovered a Critical Remote Code Execution flaw in Apache Struts

Security Affairsby @securityaffairs ()2 min read2 · 1 read
Analyze CVE-2018-11776 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2018-11776
Apache Struts Remote Code Execution via Missing or Wildcard Namespace
8.1100%KEVPoC ×5
KEV

From the original article

2 min read at securityaffairs.com

Maintainers of the Apache Struts 2 open source development framework has released security updates to address a critical remote code execution vulnerability. Security updates released this week for the Apache Struts 2 open source development framework addressed a critical RCE tracked as CVE-2018-11776 . The vulnerability affects Struts versions from 2.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.