Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Threat Report: Apache Struts CVE-2018-11776

bugcrowd.com | vulnerability | #rce | #vulnerability | #patching | #apache-struts | #cve-2018-11776 | #ognl

Summary

Bugcrowd urges patching of Apache Struts CVE-2018-11776, a critical RCE via OGNL expression injection affecting Struts 2.3 and 2.5 branches, echoing the Equifax-linked CVE-2017-5638.
Published
Collected

original ↗

Related coverage

  1. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  2. RCE vulnerability in OpenSSH: everything you need to know (wiz.io)
  3. Critical RCE vulnerability in PHP CGI: everything you need to know (wiz.io)
  4. CVE-2024-4040 exploited in the wild: everything you need to know (wiz.io)
  5. CVE-2023-38545 high severity vulnerability in cURL: everything you need to know (wiz.io)
  6. Critical and high severity Exim vulnerabilities: everything you need to know (wiz.io)

back