PT-2011-3578 · Apache · Apache Struts

Dustin Digmann · Publicado 2011-05-13 · Atualizado 2022-05-17 · CVE-2011-2087

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache Struts versions prior to 2.2.3

Description The issue allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .action URI. This is related to improper handling of value attributes in various component handlers, including FileHandler.java, HiddenHandler.java, PasswordHandler.java, RadioHandler.java, ResetHandler.java, SelectHandler.java, SubmitHandler.java, and TextFieldHandler.java.

Recommendations For versions prior to 2.2.3, update to version 2.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the .action URI to minimize the risk of exploitation. Avoid using arbitrary parameter values in the affected URI until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-2087

GHSA-5PGJ-R7C6-7C7W

Produtos afetados

Apache Struts

Referências · 8

• 🔥 https://issues.apache.org/jira/browse/WW-3597 · Exploit
• https://github.com/apache/struts · Nota
• https://github.com/apache/struts/commit/1736b56db702c6639a6d5ae1146dba5a262e3344 · Nota
• https://issues.apache.org/jira/browse/WW-3608 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2087 · Nota de Segurança
• http://vupen.com/english/advisories/2011/1198 · Aviso do Fabricante
• http://struts.apache.org/2.2.3/docs/version-notes-223.html · Nota
• https://osv.dev/vulnerability/GHSA-5pgj-r7c6-7c7w · Aviso do Fabricante