Exploit / PoChigh
Apache Software Foundation fixes code execution flaw in Apache Struts 2
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-0230 | Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution | 9.8 | 97% | PoC ×2 | |
| CVE-2020-17530 | Forced OGNL Evaluation RCE in Apache Struts 2.0.0-2.5.25 | 9.8 | 96% | KEV | KEV |
From the original article
2 min read at securityaffairs.com
The Apache Software Foundation addressed a possible remote code execution vulnerability in Struts 2 related to the OGNL technology. The Apache Software Foundation has released a security update to address a “possible remote code execution” flaw in Struts 2 that is related to the OGNL technology.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.