ID:9701 - Exploit for Security features bypass in Apache Struts - CVE-2010-1870

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Exploits ID:9701 - Exploit for Security features bypass in Apache Struts - CVE-2010-1870

ID:9701 - Exploit for Security features bypass in Apache Struts - CVE-2010-1870

Published: April 16, 2024


Vulnerability identifier: #VU88567
Vulnerability risk: Medium
CVE-ID: CVE-2010-1870
CWE-ID: CWE-254
Exploitation vector: Remote access
Vulnerable software:
Apache Struts

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to bypass security restrictions.

The vulnerability exists due to OGNL extensive expression evaluation capability in XWork in Struts uses a permissive whitelist. A remote attacker can bypass security restrictions.


Remediation

Install updates from vendor's website.