PT-2010-1183 · Apache · Apache Struts
Meder Kydyraliev
·
Publicado
2010-05-31
·
Atualizado
2022-05-13
·
CVE-2010-1870
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Apache Struts versions 2.0.0 through 2.1.8.1
Description
The OGNL extensive expression evaluation capability in XWork in Struts uses a permissive whitelist, allowing remote attackers to modify server-side context objects and bypass the "#" protection mechanism in ParameterInterceptors via the
#context, # memberAccess, #root, #this, # typeResolver, # classResolver, # traceEvaluations, # lastEvaluation, and # keepLastEvaluation OGNL context variables. This vulnerability enables a malicious user to bypass the '#'-usage protection built into the ParametersInterceptor, thus being able to manipulate server-side context objects.Recommendations
For Apache Struts versions 2.0.0 through 2.1.8.1, consider disabling the OGNL expression evaluation capability or restricting access to the vulnerable ParametersInterceptor until a patch is available. Avoid using the
#context, # memberAccess, #root, #this, # typeResolver, # classResolver, # traceEvaluations, # lastEvaluation, and # keepLastEvaluation variables in the affected API endpoints to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Struts