Enviar #33: Apache Struts2 S2-057información

TítuloApache Struts2 S2-057
DescripciónPossible Remote Code Execution when using results with no namespace and in same time, its upper action(s) have no or wildcard namespace. Same possibility when using url tag which doesn’t have value and action set.
Fuente⚠️ https://cwiki.apache.org/confluence/display/WW/S2-057
Usuario edward.zhong (UID 877)
Sumisión2018-08-22 16:16 (hace 8 años)
EstadoAceptado
Entrada de VulDB123145 [Apache Struts hasta 2.3.34/2.5.16 Namespace escalada de privilegios]
Puntos14

Interested in the pricing of exploits?

See the underground prices here!