CVE-2016-3087 Apache Struts vulnerable to arbitrary remote code execution due to improper input validation
CriticalCVSS 9.8
EPSS 81.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via vectors related to an ! (exclamation mark) operator to the REST Plugin.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.struts/struts2-core(Maven) | >= 2.3.19, < 2.3.20.3 | 2.3.20.3 |
| org.apache.struts/struts2-core(Maven) | >= 2.3.21, < 2.3.24.3 | 2.3.24.3 |
| org.apache.struts/struts2-core(Maven) | >= 2.3.25, < 2.3.28.1 | 2.3.28.1 |
| org.apache.struts/struts2-core(Maven) | = 2.3.20 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.20.1 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.24 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.24.1 | No fix listed |
| org.apache.struts/struts2-core(Maven) | = 2.3.28 | No fix listed |
| apache struts | = 2.3.20 | No fix listed |
| apache struts | = 2.3.20.1 | No fix listed |
| apache struts | = 2.3.24 | No fix listed |
| apache struts | = 2.3.24.1 | No fix listed |
| apache struts | = 2.3.28 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- 39919 exploit
- struts.apache.org vendor-advisory
- www-01.ibm.com
- github.com patch
- web.archive.org
- web.archive.org
- github.com
- github.com product
- 90960 vdb-entry
- 1036017 vdb-entry