CVE-2011-3923
Struts ParameterInterceptor vulnerability allows remote command execution
9.8
CRITICAL
CVSS 3.1
EPSS 88.8%
描述
Regular expression in ParametersInterceptor matches `top['foo'](0)` as a valid expression, which OGNL treats as `(top['foo'])(0)` and evaluates the value of 'foo' action parameter as an OGNL expression. This lets malicious users put arbitrary OGNL statements into any String variable exposed by an action and have it evaluated as an OGNL expression and since OGNL statement is in HTTP parameter value attacker can use blacklisted characters (e.g. #) to disable method execution and execute arbitrary methods, bypassing the ParametersInterceptor and OGNL library protections.
如何修補 CVE-2011-3923
要修補 CVE-2011-3923,請將受影響套件升級到下列已修補版本。
- —升級至 2.3.1.2 或更新版本
CVE-2011-3923 正在被利用嗎?
可能 — EPSS 為 88.8%,屬於高被利用機率區間,建議優先修補。
受影響套件(1)
- >= 2.0.0, < 2.3.1.2
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | CRITICAL9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |