Description

Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag. NOTE: this issue is due to an incomplete fix for CVE-2013-1966.

Remediation

References

http://struts.apache.org/development/2.x/docs/s2-014.html

http://www.securityfocus.com/bid/60167

https://bugzilla.redhat.com/show_bug.cgi?id=967656

https://cwiki.apache.org/confluence/display/WW/S2-014

Related Vulnerabilities

CVE-2021-25640 Vulnerability in maven package org.apache.dubbo:dubbo

CVE-2022-36902 Vulnerability in maven package com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter

CVE-2023-35142 Vulnerability in maven package com.checkmarx.jenkins:checkmarx

CVE-2017-7957 Vulnerability in maven package org.sonatype.nexus.xstream:xstream

CVE-2023-32070 Vulnerability in maven package org.xwiki.rendering:xwiki-rendering-syntax-xhtml

Severity

Critical

Classification

CWE-94 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Vendor Advisory Third Party Advisory VDB Entry Issue Tracking