Exploit / PoChigh

PoC exploit code for two Apache Struts 2 flaws available online

Security Affairsby @securityaffairsAug 15, 2020 · 15:53 UTC (Aug 15, 2020)2 min read2

Read at securityaffairs.com

Analyze CVE-2019-0230 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2019-0230 CVE-2019-0233 CVE-2017-5638

Tags: cve-2019-0230 cve-2019-0233 cve-2017-5638 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-5638	Unauthenticated RCE in Apache Struts Jakarta Multipart parser	9.8	100%	KEVRansomwarePoC ×10	Mar 11, 2017 KEV Nov 3, 2021
CVE-2019-0230 +1 related CVE CVE-2019-0233	Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution	9.8 group max	97%	PoC ×2	Sep 14, 2020

From the original article

2 min read at securityaffairs.com

Security researchers have discovered a PoC exploit code available online that can be used to trigger unpatched security flaws in Apache Struts 2. Security researchers have discovered a PoC code and exploit available on GitHub that that can be used to trigger the security vulnerabilities in Apache Struts 2.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.