Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Apache Struts2 Remote Command Execution (S2-052) - Vulnerability Database

Apache Struts2 Remote Command Execution (S2-052)

Description

Possible Remote Code Execution attack when using the Struts REST plugin with XStream handler to handle XML payloads.

Remediation

Upgrade to Struts 2.5.13 or Struts 2.3.34.

References

Security Bulletin S2-052

Related Vulnerabilities

Apache Struts2 Remote Command Execution (S2-053) Critical
Common tags: Code Execution Known Vulnerabilities Acumonitor
Ivanti EPM SQLi RCE (CVE-2024-29824) High
Common tags: Code Execution Known Vulnerabilities Acumonitor
Ivanti Sentry Authentication Bypass (CVE-2023-38035) Critical
Common tags: Code Execution Known Vulnerabilities Acumonitor
PaloAlto Networks Expedition RCE (CVE-2024-9463) Critical
Common tags: Code Execution Known Vulnerabilities Acumonitor
Apache Solr SSRF CVE-2017-3164 Medium
Common tags: Code Execution Known Vulnerabilities Acumonitor

Severity

High

Classification

CVE-2017-9805
CWE-94
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Code Execution
Known Vulnerabilities
Acumonitor