Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2017-9805

struts: RCE attack via REST plugin with XStream handler to deserialise XML requests

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.

CVSS 3.1 · 8.1 High EPSS 99.4% KEV · Listed
Vendors
Apache Cisco Netapp
Products
Struts Digital Media Manager Hosted Collaboration Solution and 4 more