CVE-2013-2134 in Apache Struts
摘要 (英语)
Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135.
预定
2013-02-19
披露
2013-07-16
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 9022 | Apache Struts OGNL Expression 权限提升 | 94 | 概念验证 | 官方修复 | CVE-2013-2134 |