EDB-38549

functional

Apache Struts - OGNL Expression Injection

view exploit source exploit_dbverifiedtype remoteauthor Jon Passkipublished 2013-06-05catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2013-2134UShigh9.3Exploit
Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matchin…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan