The REST Plugin in Apache Struts is using an outdated XStream library
The REST Plugin in Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted XML payload.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-9793US | high7.5 | — | ||
The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform a DoS attack using ma… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2017-429.htmWEB
- http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.htmlWEB
- http://www.securityfocus.com/bid/100611WEB
- http://www.securitytracker.com/id/1039262WEB
- https://github.com/advisories/GHSA-vwxj-6m5m-rrvhADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2017-9793ADVISORY
- https://security.netapp.com/advisory/ntap-20180629-0001WEB
- https://struts.apache.org/docs/s2-051.htmlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan