Showing 1 - 2 of 2

CVE-2017-9805

Status Candidate

Overview

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.

Related Files

Apache Struts 2.5.12 XStream Remote Code Execution: Posted Sep 7, 2017; Authored by Warflop; Apache Struts versions 2.5 through 2.5.12 REST plugin XStream remote code execution exploit.; tags | exploit, remote, code execution; advisories | CVE-2017-9805; SHA-256 | 5eefb225f4d65b10a8f7ab5d82a391bc22c225f2af56069b5ef63bc964f11659; Download | Favorite | View

Apache Struts 2 REST Plugin XStream Remote Code Execution: Posted Sep 7, 2017; Authored by wvu, Man Yue Mo | Site metasploit.com; Apache Struts versions 2.5 through 2.5.12 using the REST plugin are vulnerable to a Java deserialization attack in the XStream library.; tags | exploit, java; advisories | CVE-2017-9805; SHA-256 | 733707ff1693492ed26a3fc45635dfec661cbb6f0cba034160e94e43f171f6b9; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 227 files
indoushka 136 files
Jay Turla 111 files
Ubuntu 63 files
Gentoo 33 files
Debian 27 files
sinn3r 23 files
h00die 23 files
Pedro Ribeiro 21 files
juan vazquez 18 files

File Archives

Systems

AIX (429)
Apple (2,104)
BSD (377)
CentOS (58)
Cisco (1,944)
Debian (7,112)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,567)
HPUX (880)
iOS (386)
iPhone (108)
IRIX (220)
Juniper (70)
Linux (50,966)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (489)
RedHat (16,661)
Slackware (941)
Solaris (1,614)
SUSE (1,444)
Ubuntu (9,788)
UNIX (9,443)
UnixWare (187)
Windows (6,732)
Other

CVE-2017-9805

Overview

Related Files

File Archive:

August 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems