CVE-2013-2251

CRITICAL9.8⚠ KEVEPSS 94.3%

Code injection in Apache Struts

發布日:2022/5/13修改日:2025/10/22加入 CISA KEV 日:2022/3/25
也稱為:GHSA-47qp-8v9g-39hp

描述

The Struts 2 DefaultActionMapper supports a method for short-circuit navigation state changes by prefixing parameters with "action:" or "redirect:", followed by a desired navigational target expression. This mechanism was intended to help with attaching navigational information to buttons within forms. In Struts 2 before 2.3.15.1 the information following "action:", "redirect:" or "redirectAction:" is not properly sanitized. Since said information will be evaluated as OGNL expression against the value stack, this introduces the possibility to inject server side code.

受影響套件(1)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1CRITICAL9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H

參考連結(17)