CVE-2014-0112 ClassLoader manipulation in Apache Struts
HighCVSS 7.5
EPSS 98.1%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.struts/struts2-core(Maven) | < 2.3.20 | 2.3.20 |
| org.apache.struts/struts2-core(Maven) | = 2.0.11 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.0.11.1 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.0.11.2 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.0.12 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.0.14 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.0.5 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.0.6 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.0.8 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.0.9 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.1.2 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.1.6 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.1.8 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.1.8.1 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.2.1 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.2.1.1 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.2.3 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.2.3.1 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.1 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.1.1 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.1.2 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.12 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.14 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.14.1 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.14.2 | No fix listed |
Show 15 more
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.struts/struts2-core(Maven) | = 2.3.14.3 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.15 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.15.1 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.15.2 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.15.3 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.16 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.16.1 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.16.2 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.16.3 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.3 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.4 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.4.1 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.7 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.8 | No fix listed |
| apache struts | >= 2.0.0, < 2.3.16.2 | 2.3.16.2 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- RHSA-2019:0910 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking
- cwiki.apache.org patch vendor-advisory
- JVN#19294237 third-party-advisory vdb-entry
- JVNDB-2014-000045 third-party-advisory vdb-entry
- packetstormsecurity.com third-party-advisory vdb-entry
- www-01.ibm.com third-party-advisory
- www.oracle.com third-party-advisory
- www.vmware.com third-party-advisory
- github.com
- github.com product
- 59178 permissions-required third-party-advisory
- 59500 permissions-required third-party-advisory
- 20140426 [ANN] Struts 2.3.16.2 GA release available - security fix mailing-list third-party-advisory vdb-entry
- 20140625 NEW VMSA-2014-0007 - VMware product updates address security vulnerabilities in Apache Struts library mailing-list third-party-advisory vdb-entry
- 67064 third-party-advisory vdb-entry