Detections
Analytics

SCA: security update for org.apache.struts:struts2-core (GHSA-cr6j-3jp9-rw65)

high Tenable Cloud Security Plugin ID 422485

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when
 alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results
 are used with no namespace and in same time, its upper package have no or wildcard namespace and similar
 to results, same possibility when using url tag which doesn't have value and action set and in same time,
 its upper package have no or wildcard namespace. (CVE-2018-11776)

See Also

https://github.com/advisories/GHSA-cr6j-3jp9-rw65

Plugin Details

Severity: High

ID: 422485

Version: Revision 1.15

Type: Local

Family: SCA Checks

Published: 3/28/2025

Updated: 7/8/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Critical

Score: 9.2

Percentile: 99.76

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 8.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2018-11776

CVSS v3

Risk Factor: High

Base Score: 8.1

Temporal Score: 7.7

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/18/2018

Vulnerability Publication Date: 8/17/2018

CISA Known Exploited Vulnerability Due Dates: 5/3/2022

Exploitable With

Metasploit (Apache Struts 2 Namespace Redirect OGNL Injection)

Elliot (Apache Struts 2 Multiple Tags Result Namespace Handling RCE)

Reference Information

CVE: CVE-2018-11776

BID: 105125

cwe: CWE-20