Non évaluée
Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.
CVE-2019-0230
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory cwiki.apache.org
- patch oracle.com
- patch oracle.com
- patch oracle.com
- report launchpad.support.sap.com
- report packetstormsecurity.com
- report packetstormsecurity.com
- web lists.apache.org
- web lists.apache.org