y0d3n/CVE-2014-0094

PoC

y0d3n/CVE-2014-0094

view exploit source poc_in_githubauthor y0d3npublished 2023-06-14catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-0094US	medium5.0	99.4% (100th)	Exploit	2014-03-11
The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.