Main
Vulnerability Database
Exploits
ID:9700 - Exploit for Code Injection in Apache Struts - CVE-2013-2115
ID:9700 - Exploit for Code Injection in Apache Struts - CVE-2013-2115
Published: April 16, 2024
Vulnerability identifier: #VU88559
Vulnerability risk: High
CVE-ID: CVE-2013-2115
CWE-ID: CWE-94
Exploitation vector: Remote access
Vulnerable software:
Apache Struts
Apache Struts
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability occurs when a crafted request is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag. A remote attacker can send a specially crafted request and execute arbitrary code on the target system.
Remediation
Install updates from vendor's website.