VDB

BDU%3A2021-00912

BDU%3A2021-00912 PUBLISHED CVSS 10 CRITICAL

Уязвимость программной платформы Apache Struts, существующая из-за некорректной обработки выражений Object Graph Navigation Language, позволяющая нарушителю выполнить произвольный код

Risk Scores

CVSS 2.0
10

Affected Products

VendorProductVersions
Apache Software FoundationApache StrutsStruts 2.0.0 - Struts 2.5.25
Oracle Corp., Apache Software FoundationBusiness Intelligence Enterprise Edition, Oracle Financial Services Market Risk Measurement and Management, Oracle Financial Services Data Integration Hub, Struts, Hospitality Opera 5, Oracle Communications Policy Management, Oracle Communications Pricing Design Center, MySQL Enterprise Monitor

Timeline

  • Dec 23, 2020 PoC Published
  • Feb 23, 2021 CVE Published
  • Nov 8, 2021 PoC Published
  • Nov 20, 2021 PoC Published
  • Sep 24, 2024 CVE Updated
  • Dec 24, 2024 PoC Published
  • Feb 6, 2025 PoC Published
  • Feb 23, 2025 PoC Published
  • Feb 23, 2025 PoC Published
  • Feb 2, 2026 PoC Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›