cve/2017/CVE-2017-9793.md

CVE-2017-9793

Description

The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted XML payload.

POC

Reference

No PoCs from references.

Github

• https://github.com/0xm4ud/S2-045-and-S2-052-Struts-2-in-1
• https://github.com/ARPSyndicate/cvemon
• https://github.com/IkerSaint/VULNAPP-vulnerable-app
• https://github.com/khodges42/Etrata
• https://github.com/m4udSec/S2-045-and-S2-052-Struts-2-in-1
• https://github.com/pctF/vulnerable-app