Exploit / PoCcritical

Experts warn of possible attacks after PoC code for CVE-2018

Security Affairsby @securityaffairsAug 27, 2018 · 15:13 UTC (Aug 27, 2018)3 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2018-11776 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2018-11776 CVE-2017-5638

Tags: cve-2018-11776 cve-2017-5638 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-5638	Unauthenticated RCE in Apache Struts Jakarta Multipart parser	9.8	100%	KEVRansomwarePoC ×10	Mar 11, 2017 KEV Nov 3, 2021
CVE-2018-11776	Apache Struts Remote Code Execution via Missing or Wildcard Namespace	8.1	100%	KEVPoC ×5	Aug 22, 2018 KEV Nov 3, 2021

From the original article

3 min read at securityaffairs.com

The Exploit code for the recently discovered Critical remote code execution vulnerability CVE-2018-11776 in Apache Struts 2 was published on GitHub, experts fear massive attacks. The CVE-2018-11776 vulnerability affects Struts 2. 3 through 2.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.