Vulnerabilitycritical

New Apache Struts RCE Flaw Lets Hackers Take Over Web Servers

The Hacker Newsby @TheHackersNewsAug 23, 2018 · 18:30 UTC (Aug 23, 2018)3 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2018-11776 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2018-11776 CVE-2017-5638 CVE-2017-9805

Tags: cve-2018-11776 cve-2017-5638 cve-2017-9805 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-5638	Unauthenticated RCE in Apache Struts Jakarta Multipart parser	9.8	100%	KEVRansomwarePoC ×10	Mar 11, 2017 KEV Nov 3, 2021
CVE-2017-9805	XML Deserialization RCE in Apache Struts 2 REST Plugin	8.1	99%	KEVPoC	Sep 15, 2017 KEV Nov 3, 2021
CVE-2018-11776	Apache Struts Remote Code Execution via Missing or Wildcard Namespace	8.1	100%	KEVPoC ×5	Aug 22, 2018 KEV Nov 3, 2021

From the original article

3 min read at thehackernews.com

Semmle security researcher Man Yue Mo has disclosed a critical remote code execution vulnerability in the popular Apache Struts web application framework that could allow remote attackers to run malicious code on the affected servers.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.