Most recent entries from all

bdu:2016-01691

cnvd-2016-04040

EUVD-2026-84392

fkie_cve-2016-4438

The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression.

GHSA-4prj-vw9j-v6pr — Arbitrary code execution in Apache Struts 2

Affected: Maven: org.apache.struts:struts2-core, Maven: org.apache.struts:struts2-rest-plugin

The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression.

gsd-2016-4438

jvndb-2016-000110

Apache Struts provided by the Apache Software Foundation is a software framework for creating Java web applications. Web applications that are developed using Apache Struts 2 REST Plugin contain a remote code execution vulnerability. Note that the exploit code for this vulnerability is publicly available. Shinsaku Nomura of Bitforest Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.