CVE-2013-2251

描述

The Struts 2 DefaultActionMapper supports a method for short-circuit navigation state changes by prefixing parameters with "action:" or "redirect:", followed by a desired navigational target expression. This mechanism was intended to help with attaching navigational information to buttons within forms. In Struts 2 before 2.3.15.1 the information following "action:", "redirect:" or "redirectAction:" is not properly sanitized. Since said information will be evaluated as OGNL expression against the value stack, this introduces the possibility to inject server side code.

如何修補 CVE-2013-2251

要修補 CVE-2013-2251,請將受影響套件升級到下列已修補版本。

• —升級至 2.3.15.1 或更新版本

CVE-2013-2251 正在被利用嗎?

是 — CVE-2013-2251 已列入 CISA Known Exploited Vulnerabilities (KEV) 清單,代表正在被實際利用,請立即修補。

受影響套件(1)

• from 0, < 2.3.15.1

CVSS 分數

參考連結(17)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2013-2251
• PATCHgithub.com/apache/struts
• WEBarchiva.apache.org/security.html
• WEBcxsecurity.com/issue/WLB-2014010087
• WEBpacketstormsecurity.com