Showing 1 - 2 of 2

CVE-2017-9805

Status Candidate

Overview

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.

Related Files

Apache Struts 2.5.12 XStream Remote Code Execution: Posted Sep 7, 2017; Authored by Warflop; Apache Struts versions 2.5 through 2.5.12 REST plugin XStream remote code execution exploit.; tags | exploit, remote, code execution; advisories | CVE-2017-9805; SHA-256 | 5eefb225f4d65b10a8f7ab5d82a391bc22c225f2af56069b5ef63bc964f11659; Download | Favorite | View

Apache Struts 2 REST Plugin XStream Remote Code Execution: Posted Sep 7, 2017; Authored by wvu, Man Yue Mo | Site metasploit.com; Apache Struts versions 2.5 through 2.5.12 using the REST plugin are vulnerable to a Java deserialization attack in the XStream library.; tags | exploit, java; advisories | CVE-2017-9805; SHA-256 | 733707ff1693492ed26a3fc45635dfec661cbb6f0cba034160e94e43f171f6b9; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 259 files
Ubuntu 85 files
Gentoo 29 files
indoushka 26 files
Debian 11 files
Sina Kheirkhah 7 files
tmrswrr 7 files
Rodolfo Tavares 4 files
S. Dietz 2 files
Google Security Research 2 files

File Archives

Systems

AIX (429)
Apple (2,090)
BSD (377)
CentOS (58)
Cisco (1,927)
Debian (7,082)
Fedora (1,693)
FreeBSD (1,246)
Gentoo (4,534)
HPUX (880)
iOS (376)
iPhone (108)
IRIX (220)
Juniper (69)
Linux (50,527)
Mac OS X (691)
Mandriva (3,105)
NetBSD (256)
OpenBSD (489)
RedHat (16,402)
Slackware (941)
Solaris (1,611)
SUSE (1,444)
Ubuntu (9,689)
UNIX (9,431)
UnixWare (187)
Windows (6,667)
Other

CVE-2017-9805

Overview

Related Files

File Archive:

July 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems