Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Apache Struts 2 ClassLoader manipulation and denial of service (S2-020) - Vulnerability Database

Apache Struts 2 ClassLoader manipulation and denial of service (S2-020)

Description

The default upload mechanism in Apache Struts 2 is based on Commons FileUpload version 1.3 which is vulnerable and allows DoS attacks. Additional ParametersInterceptor allows access to 'class' parameter which is directly mapped to getClass() method and allows ClassLoader manipulation.

Remediation

Upgrade to Struts 2.3.16.2.

References

Apache Struts S2-020

Related Vulnerabilities

ColdFusion AMF Deserialization RCE High
Common tags: Code Execution Denial Of Service
Apache OFBiz XMLRPC Deserialization RCE (CVE-2020-9496/CVE-2023-49070) High
Common tags: Code Execution Denial Of Service
Reflected Cross-Site Scripting (XSS) vulnerability in PAN-OS management web interface High
Common tags: Code Execution Denial Of Service
PHP preg_replace used on user input Medium
Common tags: Code Execution Denial Of Service
PHP unserialize() used on user input Medium
Common tags: Code Execution Denial Of Service

Severity

High

Classification

CVE-2014-0094
CVE-2014-0050
CWE-701
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Code Execution
Denial Of Service