2018-11-14 09:04:54 -05:00
{
2020-09-14 17:01:32 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"data_version" : "4.0" ,
2019-03-17 23:20:33 +00:00
"CVE_data_meta" : {
"ID" : "CVE-2019-0230" ,
2020-09-14 17:01:32 +00:00
"ASSIGNER" : "security@apache.org" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "n/a" ,
"product" : {
"product_data" : [
{
"product_name" : "Apache Struts" ,
"version" : {
"version_data" : [
{
"version_value" : "Apache Struts 2.0.0 to 2.5.20"
}
]
}
}
]
}
}
]
}
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "Remote Code Execution"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"refsource" : "MISC" ,
"name" : "https://cwiki.apache.org/confluence/display/ww/s2-059" ,
"url" : "https://cwiki.apache.org/confluence/display/ww/s2-059"
2020-11-17 18:01:37 +00:00
} ,
2021-01-20 15:02:06 +00:00
{
"url" : "https://www.oracle.com/security-alerts/cpujan2021.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/security-alerts/cpujan2021.html"
} ,
2020-11-17 18:01:37 +00:00
{
"refsource" : "MISC" ,
"name" : "http://packetstormsecurity.com/files/160108/Apache-Struts-2.5.20-Double-OGNL-Evaluation.html" ,
"url" : "http://packetstormsecurity.com/files/160108/Apache-Struts-2.5.20-Double-OGNL-Evaluation.html"
2020-11-17 22:01:38 +00:00
} ,
{
"refsource" : "MISC" ,
"name" : "https://launchpad.support.sap.com/#/notes/2982840" ,
"url" : "https://launchpad.support.sap.com/#/notes/2982840"
2020-12-24 19:01:40 +00:00
} ,
{
"refsource" : "MISC" ,
"name" : "http://packetstormsecurity.com/files/160721/Apache-Struts-2-Forced-Multi-OGNL-Evaluation.html" ,
"url" : "http://packetstormsecurity.com/files/160721/Apache-Struts-2-Forced-Multi-OGNL-Evaluation.html"
2021-01-26 18:05:08 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[announce] 20210125 Apache Software Foundation Security Report: 2020" ,
"url" : "https://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922@%3Cannounce.apache.org%3E"
2021-02-24 04:00:39 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[announce] 20210223 Re: Apache Software Foundation Security Report: 2020" ,
"url" : "https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7@%3Cannounce.apache.org%3E"
2021-06-11 10:44:45 -07:00
} ,
{
2021-06-14 18:01:00 +00:00
"url" : "https://www.oracle.com/security-alerts/cpuApr2021.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/security-alerts/cpuApr2021.html"
2021-10-19 14:23:14 -07:00
} ,
{
2021-10-20 11:01:07 +00:00
"url" : "https://www.oracle.com/security-alerts/cpuoct2021.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/security-alerts/cpuoct2021.html"
2020-09-14 17:01:32 +00:00
}
]
2019-03-17 23:20:33 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2020-09-14 17:01:32 +00:00
"value" : "Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution."
2019-03-17 23:20:33 +00:00
}
]
}
}
