Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the
    ParameterInterceptor class and execute arbitrary commands. (CVE-2011-3923)

The version of Apache Struts running on the remote host is 2.x prior to 2.3.1.2. It, therefore, is affected a possible remote command execution vulnerability.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote web application appears to use Apache Struts 2, a web framework that uses XWork. Due to a flaw in the ParameterInterceptor class, user input is not properly sanitized, which allows a remote attacker to run arbitrary Java code on the remote host by sending a specially crafted HTTP request.

ID	Name	Product	Family	Severity
416183	SCA: security update for org.apache.struts:struts2-core (GHSA-j68f-8h6p-9h5q)	Tenable Cloud Security	SCA Checks	critical
416183	SCA: security update for org.apache.struts:struts2-core (GHSA-j68f-8h6p-9h5q)	Tenable Self-Hosted Container Security	SCA Checks	critical
117403	Apache Struts 2.x < 2.3.1.2 RCE (S2-009)	Nessus	Misc.	critical
57850	Apache Struts 2 ParameterInterceptor Class OGNL Expression Parsing Remote Command Execution	Nessus	CGI abuses	critical

Detections

Analytics

CVE-2011-3923

critical

Tenable Plugins

critical

critical

critical

critical