Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apache struts 2.3.20.3 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2016-3087
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote malicious users to execute arbitrary code via vectors related to an ! (exclamation mark) operator to the REST Plugin.
Apache Struts 2.3.20.1Apache Struts 2.3.20Apache Struts 2.3.24.1Apache Struts 2.3.24Apache Struts 2.3.28
8.1
CVSSv3
CVE-2017-9805
The REST Plugin in Apache Struts 2.1.1 up to and including 2.3.x prior to 2.3.34 and 2.5.x prior to 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.
Apache Struts 2.1.8Apache Struts 2.1.8.1Apache Struts 2.3.1.2Apache Struts 2.3.3Apache Struts 2.3.14.2Apache Struts 2.3.14.3Apache Struts 2.3.16.2Apache Struts 2.3.16.3Apache Struts 2.3.28Apache Struts 2.3.28.1Apache Struts 2.5.3Apache Struts 2.5.4Apache Struts 2.5.10.1Apache Struts 2.5.11Apache Struts 2.1.2Apache Struts 2.2.1Apache Struts 2.2.1.1Apache Struts 2.3.4Apache Struts 2.3.4.1Apache Struts 2.3.15Apache Struts 2.3.15.1Apache Struts 2.3.20
10
CVSSv3
CVE-2017-5638
The Jakarta Multipart parser in Apache Struts 2 2.3.x prior to 2.3.32 and 2.5.x prior to 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote malicious users to execute arbitrary commands via a crafted Content-Typ...
Apache Struts 2.3.5Apache Struts 2.3.28Apache Struts 2.3.20.2Apache Struts 2.3.15Apache Struts 2.3.25Apache Struts 2.3.14Apache Struts 2.3.13Apache Struts 2.3.16Apache Struts 2.3.24.2Apache Struts 2.3.17Apache Struts 2.3.24.1Apache Struts 2.3.22Apache Struts 2.3.9Apache Struts 2.3.16.3Apache Struts 2.3.23Apache Struts 2.3.6Apache Struts 2.3.24.3Apache Struts 2.3.15.2Apache Struts 2.3.29Apache Struts 2.3.14.3Apache Struts 2.3.19Apache Struts 2.3.20.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook