Exploit / PoCcritical

PoC exploit for critical Apache Struts flaw found online

Help Net Securityby @zeljkazorzNov 20, 2023 · 11:02 UTC (Nov 20, 2023)2 min read2

Read at helpnetsecurity.com

Analyze CVE-2018-11776 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2018-11776 CVE-2017-5638

Tags: cve-2018-11776 cve-2017-5638 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-5638	Unauthenticated RCE in Apache Struts Jakarta Multipart parser	9.8	100%	KEVRansomwarePoC ×10	Mar 11, 2017 KEV Nov 3, 2021
CVE-2018-11776	Apache Struts Remote Code Execution via Missing or Wildcard Namespace	8.1	100%	KEVPoC ×5	Aug 22, 2018 KEV Nov 3, 2021

From the original article

2 min read at helpnetsecurity.com

The Apache Software Foundation revealed last week the existence of a critical Apache Struts flaw (CVE-2018-11776) similar to the one exploited in the Equifax breach and urged organizations and developers to upgrade their installations to versions 2. 3. 35 or 2.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.