Описание
The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libstruts1.2-java | removed | package | ||
| libstruts1.2-java | end-of-life | wheezy | package |
Примечания
https://struts.apache.org/docs/s2-027.html
EPSS
Процентиль: 86%
0.02858
Низкий
Связанные уязвимости
CVSS3: 8.8
ubuntu
больше 8 лет назад
The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling.
CVSS3: 8.8
nvd
больше 8 лет назад
The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling.
EPSS
Процентиль: 86%
0.02858
Низкий