Invia #33: Apache Struts2 S2-057informazioni

TitoloApache Struts2 S2-057
DescrizionePossible Remote Code Execution when using results with no namespace and in same time, its upper action(s) have no or wildcard namespace. Same possibility when using url tag which doesn’t have value and action set.
Fonte⚠️ https://cwiki.apache.org/confluence/display/WW/S2-057
Utente
 edward.zhong (UID 877)
Sottomissione22/08/2018 16:16 (8 anni fa)
StatoAccettato
Voce VulDB123145 [Apache Struts fino a 2.3.34/2.5.16 Namespace escalationi di privilegi]
Punti14

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Want to know what is going to be exploited?

We predict KEV entries!