CVE-2010-1870
mediumPriorität · beachten · 62EPSS 0.920 · 100. PerzentilExploit · funktionalEURUUSEPSS · bewertet 2026-10-26
The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects and bypass the "#" protection mechanism in ParameterInterceptors via the (1) #context, (2) #_memberAccess, (3) #root, (4) #this, (5) #_typeResolver, (6) #_classResolver, (7) #_traceEvaluations, (8) #_lastEvaluation, (9) #_keepLastEvaluation, and possibly other OGNL context variables, a different vulnerability than CVE-2008-6504.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (3)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- EDB-17691Apache Struts < 2.2.0 - Remote Command Execution (Metasploit)funktional · exploit_db
- exploit/multi/http/struts_code_execApache Struts Remote Command Executionfunktional · metasploit
- EDB-14360Struts2/XWork < 2.2.0 - Remote Command ExecutionPoC · exploit_db
betroffene Produkte (45)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- GHSA-x5fc-pgpx-59j5Server side object manipulation in Apache Struts2022-05-13ghsa · osvUS
OGNL provides, among other features, extensive expression evaluation capabilities. This vulnerability allows a malicious user to bypass the '#'-usage protection built into the ParametersInterceptor, thus being able to manipulate server side context objects. This behavior was already addressed in [S2-003](https://cwiki.apache.org/confluence/display/WW/S2-003), but it turned out that the resulting fix based on whitelisting acceptable parameter names closed the vulnerability only partially.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (24)
Externe Belege — Patches, Meldungen, Analysen.
- http://blog.o0o.nu/2010/07/cve-2010-1870-struts2xwork-remote.htmlenisa_euvd
- http://confluence.atlassian.com/display/FISHEYE/FishEye+Security+Advisory+2010-06-16enisa_euvd
- http://packetstormsecurity.com/files/159643/LISTSERV-Maestro-9.0-8-Remote-Code-Execution.htmlenisa_euvd
- http://seclists.org/fulldisclosure/2010/Jul/183enisa_euvd
- http://seclists.org/fulldisclosure/2020/Oct/23enisa_euvd
- http://secunia.com/advisories/59110enisa_euvd
- http://securityreason.com/securityalert/8345enisa_euvd
- http://struts.apache.org/2.2.1/docs/s2-005.htmlenisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan