VulnerabilitycriticalExploited in the wild

Threat Brief: Information on Critical Apache Struts Vulnerability CVE-2018

Palo Alto Unit 42by Unit 42Sep 21, 2020 · 18:41 UTC (Sep 21, 2020)3 min read4 · 1 read

Read at unit42.paloaltonetworks.com

Analyze CVE-2018-1176 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2018-1176 CVE-2018-11776

Tags: cve-2018-1176 cve-2018-11776 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-1176	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935	8.8	4%		May 17, 2018
CVE-2018-11776	Apache Struts Remote Code Execution via Missing or Wildcard Namespace	8.1	100%	KEVPoC ×5	Aug 22, 2018 KEV Nov 3, 2021

From the original article

3 min read at unit42.paloaltonetworks.com

On August 22, 2018, the Apache Foundation released a critical security update for CVE-2018-1176 , a remote code execution vulnerability affecting Apache Struts versions 2. 3 to 2. 3.

Palo Alto Unit 42

By Unit 42 · unit42.paloaltonetworks.com

Read the full article at Palo Alto Unit 42

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.