CVE-2008-6504

Опубликовано: 23 мар. 2009

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a \u0023 representation for the # character.

Ссылки

http://fisheye6.atlassian.com/cru/CR-9/
Patch
http://issues.apache.org/struts/browse/WW-2692
Exploit
http://jira.opensymphony.com/browse/XW-641
Exploit
http://osvdb.org/49732
http://secunia.com/advisories/32495
Vendor Advisory
http://secunia.com/advisories/32497
Vendor Advisory
http://struts.apache.org/2.x/docs/s2-003.html
Exploit
http://www.securityfocus.com/bid/32101
http://www.vupen.com/english/advisories/2008/3003
Vendor Advisory
http://www.vupen.com/english/advisories/2008/3004
https://exchange.xforce.ibmcloud.com/vulnerabilities/46328
http://fisheye6.atlassian.com/cru/CR-9/
Patch
http://issues.apache.org/struts/browse/WW-2692
Exploit
http://jira.opensymphony.com/browse/XW-641
Exploit
http://osvdb.org/49732
http://secunia.com/advisories/32495
Vendor Advisory
http://secunia.com/advisories/32497
Vendor Advisory
http://struts.apache.org/2.x/docs/s2-003.html
Exploit
http://www.securityfocus.com/bid/32101
http://www.vupen.com/english/advisories/2008/3003
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:opensymphony:xwork:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:opensymphony:xwork:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:opensymphony:xwork:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:opensymphony:xwork:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:opensymphony:xwork:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:opensymphony:xwork:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:opensymphony:xwork:2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:opensymphony:xwork:2.1.1:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.65118

Средний

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2008-6504

redhat

больше 17 лет назад

GHSA-wxw2-2mx5-c5qf

github

больше 3 лет назад

Improper Input Validation in OpenSymphony XWork