The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the tag’s attributes could perform a double evaluation if a developer applied forced OGNL evaluation by using the %{...} syntax. Using forced OGNL evaluation on untrusted user input can lead to a Remote Code Execution and security degradation.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the
    tag’s attributes could perform a double evaluation if a developer applied forced OGNL evaluation by using
    the %{...} syntax. Using forced OGNL evaluation on untrusted user input can lead to a Remote Code
    Execution and security degradation. (CVE-2021-31805)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the K24608264 advisory.

  - Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code     execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25. (CVE-2020-17530)

  - The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the     tag's attributes could perform a double evaluation if a developer applied forced OGNL evaluation by using     the %{...} syntax. Using forced OGNL evaluation on untrusted user input can lead to a Remote Code     Execution and security degradation. (CVE-2021-31805)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MySQL Enterprise Monitor installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2022 CPU advisory.   
  - Vulnerability in the MySQL Enterprise Monitor product of Oracle MySQL (component: Monitoring: General     (highlight.js)). Supported versions that are affected are 8.0.30 and prior. A malicious HTML code block can be     crafted that will result in prototype pollution of the base object's prototype during highlighting.     The pollution should just be harmless data but this can cause problems for applications not expecting these     properties to exist and can result in strange behavior or application crashes, i.e. a potential DOS vector.     (CVE-2020-26237)   
  - Vulnerability in the MySQL Enterprise Monitor product of Oracle MySQL (component: Monitoring: General     (Apache Struts)). Supported versions that are affected are 8.0.30 and prior. some tag attributes could perform a     double evaluation if a developer applied forced OGNL evaluation by using the %{...} syntax. Using forced OGNL     evaluation on untrusted user input can lead to a Remote Code Execution and security degradation. (CVE-2021-31805)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the tag's attributes could perform a double evaluation if a developer applied forced OGNL evaluation by using the %{...} syntax. Using forced OGNL evaluation on untrusted user input can lead to a Remote Code Execution and security degradation.

The version of Apache Struts installed on the remote host is prior to 2.5.30. It is, therefore, affected by a vulnerability as referenced in the S2-062 advisory.

  - The fix issued for CVE-2020-17530 ( S2-061 ) was incomplete. Still some of the tag's attributes could     perform a double evaluation if a developer applied forced OGNL evaluation by using the %{...} syntax.
    Using forced OGNL evaluation on untrusted user input can lead to a Remote Code Execution and security     degradation. (CVE-2021-31805)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
419197	SCA: security update for org.apache.struts:struts2-core (GHSA-v8j6-6c2r-r27c)	Tenable Cloud Security	SCA Checks	Local	critical
419197	SCA: security update for org.apache.struts:struts2-core (GHSA-v8j6-6c2r-r27c)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
184325	F5 Networks BIG-IP : Apache Struts vulnerabilities (K24608264)	Nessus	F5 Networks Local Security Checks	Local	critical
163292	Oracle MySQL Enterprise Monitor (July 2022 CPU)	Nessus	CGI abuses	Combined	critical
113226	Apache Struts 2.x < 2.5.29 Remote Code Execution (S2-062)	Web App Scanning	Component Vulnerability	Check Based	critical
159667	Apache Struts 2.0.0 < 2.5.30 Possible Remote Code Execution vulnerability (S2-062)	Nessus	Misc.	Local	critical

Detections

Analytics

CVE-2021-31805

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical