The version of Apache Struts running on the remote host is 2.5.x prior to 2.5.12. It is, therefore, affected by multiple vulnerabilities :

  - A denial of service vulnerability exists when handling     a specially crafted URL in a form field when the     built-in URL validator is used. An unauthenticated,     remote attacker can exploit this to cause the server     process to overload. Note that this issue only affects     version 2.5.x. (CVE-2017-7672)

  - A flaw exists in unspecified Spring AOP functionality     that is used to secure Struts actions. An authenticated,     remote attacker can exploit this to cause a denial of     service condition. (CVE-2017-9787)

  - A deserialization vulnerability in Apache Commons     FileUpload which could be leveraged for remote     code execution. (CVE-2016-1000031)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Apache Struts 2.5.x < 2.5.12 Multiple DoS (S2-047) (S2-049)

critical Nessus Plugin ID 101548

Version 1.17