VDB
BDU%3A2018-01069
BDU%3A2018-01069
PUBLISHED
CVSS 10 CRITICAL
Уязвимость ядра программной платформы Apache Struts, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Struts |
Timeline
- Sep 7, 2018 CVE Published
- Oct 2, 2020 PoC Published
- Nov 6, 2020 PoC Published
- Sep 6, 2021 PoC Published
- Sep 24, 2024 CVE Updated
- Oct 9, 2024 PoC Published
- Dec 12, 2024 PoC Published
- Mar 28, 2025 PoC Published
- Sep 26, 2025 PoC Published
References
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-005.txt url
- http://www.securityfocus.com/bid/105125 url
- http://www.securitytracker.com/id/1041547 url
- https://cwiki.apache.org/confluence/display/WW/S2-057 url
- https://github.com/hook-s3c/CVE-2018-11776-Python-PoC url
- https://lgtm.com/blog/apache_struts_CVE-2018-11776 url
- https://security.netapp.com/advisory/ntap-20180822-0001/ url
- https://www.exploit-db.com/exploits/45260/ url
- https://www.exploit-db.com/exploits/45262/ url
- http://www.opennet.ru/opennews/art.shtml?num=49174 url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url