Vulnerabilitycritical

CVE-2021-31805 RCE bug in Apache Struts was finally patched

Security Affairsby @securityaffairsApr 13, 2022 · 19:32 UTC (Apr 13, 2022)2 min read3 · 1 read

Read at securityaffairs.com

Analyze CVE-2021-31805 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-31805 CVE-2020-17530

Tags: cve-2021-31805 cve-2020-17530 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-17530	Forced OGNL Evaluation RCE in Apache Struts 2.0.0-2.5.25	9.8	96%	KEV	Dec 11, 2020 KEV Nov 3, 2021
CVE-2021-31805	The fix issued for CVE-2020-17530 was incomplete	9.8	85%		Apr 12, 2022

From the original article

2 min read at securityaffairs.com

Apache addressed a critical flaw in Apache Struts RCE that was linked to a previous issue that was not properly fixed. Apache Struts is an open-source web application framework for developing Java EE web applications. The Apache Software Foundation urges organizations to address a vulnerability, tracked as CVE-2021-31805, affecting Struts versions ranging 2.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.