admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-05 10:16:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

add S2-061

Browse Source
This commit is contained in:
tardc 2020-12-16 10:39:16 +08:00
parent 099ff419ff
commit 04c173e86f
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Struts2/S2-061(CVE-2020-17530)/README.md Normal file
View File

@ -0,0 +1,12 @@
# S2-061 (CVE-2020-17530) Remote Code Execution Vulnerability
Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.
**Affected version**: Apache Struts 2.0.0 - Struts 2.5.25
**[FOFA](https://fofa.so/result?qbase64=YXBwPSJTdHJ1dHMyIg%3D%3D) query rule**: app="Struts2"
# Demo
![](S2-061.gif)

BIN
Struts2/S2-061(CVE-2020-17530)/S2-061.gif Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 408 KiB