Количество 5
Количество 5
CVE-2013-2135
Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted value that contains both "${}" and "%{}" sequences, which causes the OGNL code to be evaluated twice.
CVE-2013-2135
Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted value that contains both "${}" and "%{}" sequences, which causes the OGNL code to be evaluated twice.
CVE-2013-2135
Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arb ...
GHSA-pw8r-x2qm-3h5m
Arbitrary code execution in Apache Struts 2
BDU:2022-05821
Уязвимость реализации класса преобразования выражений OGNL (Object-Graph Navigation Language) программной платформы Apache Struts, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2013-2135 Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted value that contains both "${}" and "%{}" sequences, which causes the OGNL code to be evaluated twice. | CVSS2: 9.3 | 14% Средний | около 13 лет назад |
 | CVE-2013-2135 Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted value that contains both "${}" and "%{}" sequences, which causes the OGNL code to be evaluated twice. | CVSS2: 9.3 | 14% Средний | около 13 лет назад |
| CVE-2013-2135 Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arb ... | CVSS2: 9.3 | 14% Средний | около 13 лет назад |
| GHSA-pw8r-x2qm-3h5m Arbitrary code execution in Apache Struts 2 | 14% Средний | больше 4 лет назад | |
 | BDU:2022-05821 Уязвимость реализации класса преобразования выражений OGNL (Object-Graph Navigation Language) программной платформы Apache Struts, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.6 | 14% Средний | около 13 лет назад |
Уязвимостей на страницу