CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2017-98058.1/HIGHEPSS 99.4%CISA KEV

2017-09-15

Apache Struts 2 REST Plugin XML Deserialization Remote Code Execution Vulnerability (CVE-2017-9805, S2-052)

[Affected Scope] Apache Struts versions 2.1.1 through 2.3.33 and 2.5 through 2.5.12 using the REST plugin

[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the target server by sending malicious XML payloads

[Mitigation] Immediately upgrade Apache Struts to version 2.3.34 or 2.5.13 or higher, or restrict/disable XML handling in the REST plugin