SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  Apache Struts OGNL Wildcard Remote Code Execution 5

Category: WEB-ATTACKS      

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when using results with no namespace and in same time, its upper action(s) have no or wildcard namespace. Same possibility when using url tag which doesn't have value and action set and in same time, its upper action(s) have no or wildcard namespace.

References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11776


Relevant Information