Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before
    3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via
    unspecified vectors. (CVE-2016-3093)

Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a website) via unspecified vectors. (CVE-2016-3093)

The version of Apache Struts running on the remote host is 2.x prior to 2.3.28. It is, therefore, affected by the following vulnerabilities :
  - A cross-site scripting vulnerability exists due to     improper validation of user-supplied input when using     a single byte page encoding. A remote attacker can     exploit this, via non-spec URL-encoded parameter value     including multi-byte characters. (CVE-2016-4003)

  - A remote code execution vulnerability exists due to     double OGNL evaluation of attribute values assigned to     certain tags. An unauthenticated, remote attacker can     exploit this, via a specially crafted request, to     execute arbitrary code. (CVE-2016-0785)

  - A cross-site scripting vulnerability exists due to     improper validation of user-supplied input when using     the I18NInterceptor. A remote attacker can exploit this,     via a specially crafted request, to execute arbitrary     script code in a user's browser session. (CVE-2016-2162)

  - A denial of service vulnerability exists in the     Object-Graph Navigation Language (OGNL) component due to     a flaw in the implementation of the cache for stored     method references. A context-dependent attacker can     exploit this to block access to arbitrary websites.
    (CVE-2016-3093)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
409384	SCA: security update for ognl:ognl, org.apache.struts:struts2-core (GHSA-383p-xqxx-rrmp)	Tenable Cloud Security	SCA Checks	medium
409384	SCA: security update for ognl:ognl, org.apache.struts:struts2-core (GHSA-383p-xqxx-rrmp)	Tenable Self-Hosted Container Security	SCA Checks	medium
91861	F5 Networks BIG-IP : Apache Struts 2 vulnerability (K23432135)	Nessus	F5 Networks Local Security Checks	medium
90153	Apache Struts 2.x < 2.3.28 Multiple Vulnerabilities (S2-028) (S2-029) (S2-030) (S2-034)	Nessus	Misc.	high

Detections

Analytics

CVE-2016-3093

medium

Tenable Plugins

medium

medium

medium

high