---
id: 2356
title: "Threat Report: Apache Struts CVE-2018-11776"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/threat-report-apache-struts-cve-2018-11776/"
published_at: "2018-08-23T00:00:00Z"
tags: ["rce", "vulnerability", "patching", "apache-struts", "cve-2018-11776", "ognl"]
phying_url: "https://phying.com/item/2356"
lang: en
---

# Threat Report: Apache Struts CVE-2018-11776

## Summary

Bugcrowd urges patching of Apache Struts CVE-2018-11776, a critical RCE via OGNL expression injection affecting Struts 2.3 and 2.5 branches, echoing the Equifax-linked CVE-2017-5638.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2018-08-23T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/threat-report-apache-struts-cve-2018-11776/
- **Phying News:** https://phying.com/item/2356