Vulnerability feed

Vulnerability

CVE-2013-2251

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2013-2251
Description:: Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
Last updated date:: 11/27/2024

Reports

alt

ACTIVELY EXPLOITED

Type:: exploitation
Confidence:: HIGH
Date of publishing:: 03/25/2022
Reference url to background: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Type:: exploit
Confidence:: HIGH
Date of publishing:: 10/02/2020
Reference url to background: https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/struts_default_action_mapper.rb

Type:: exploit
Confidence:: HIGH
Date of publishing:: 07/16/2024
Reference url to background: http://cxsecurity.com/issue/WLB-2014010087

Type:: exploit
Confidence:: HIGH
Date of publishing:: 07/16/2024
Reference url to background: http://packetstormsecurity.com/files/159629/Apache-Struts-2-Remote-Code-Execution.html

Type:: exploit
Confidence:: HIGH
Date of publishing:: 07/16/2024
Reference url to background: http://seclists.org/fulldisclosure/2013/Oct/96

Vulnerability Feed Contributors About Blog

@inTheWild

©2025 |