exploit/multi/http/struts2_multi_eval_ognl

weaponized

Apache Struts 2 Forced Multi OGNL Evaluation

view exploit source metasploittype exploitpublished 2020-09-14catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-17530US	critical9.8OT critical	96.3% (100th)	KEV	2020-12-11
Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.
CVE-2019-0230US	critical9.8	96.9% (100th)	Exploit	2020-09-14
Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.