CVE-2018-11776

Description

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesnt have value and action set and in same time, its upper package have no or wildcard namespace.

Risk Information

Base Score
8.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
94.431

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2018-11776 are fixed in Apache-struts2-core 2.3.35Windows
Vulnerabilities CVE-2018-11776 are fixed in Apache-struts2-core 2.5.17Windows
Multiple Vulnerabilities are affected in Netapp Active Iq Unified Manager 2.3Windows
Multiple Vulnerabilities are affected in Netapp Oncommand Insight 2.3Windows
Multiple Vulnerabilities are affected in Netapp Snapcenter 2.3Windows
Multiple Vulnerabilities are affected in Netapp Oncommand Workflow Automation 2.3Windows
Vulnerabilities CVE-2018-11776 are fixed in Apache-structs2-core for Linux 2.3.35Linux
Vulnerabilities CVE-2018-11776 are fixed in Apache-structs2-core for Linux 2.5.17Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234