EDB-49068

PoC

Apache Struts 2.5.20 - Double OGNL evaluation

view exploit source exploit_dbtype remoteauthor West Shepherdpublished 2020-11-17catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-0230US	critical9.8	96.9% (100th)	Exploit	2020-09-14
Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.