exploit/multi/http/struts_dev_mode

weaponized

Apache Struts 2 Developer Mode OGNL Execution

view exploit source metasploittype exploitpublished 2012-01-06catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-0394US	medium6.8	72.9% (99th)	Exploit	2012-01-08
The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOT…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.