VDB
BDU%3A2022-05818
BDU%3A2022-05818
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Уязвимость реализации класса преобразования выражений OGNL (Object-Graph Navigation Language) программной платформы Apache Struts, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
9.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| IBM Corp., Apache Software Foundation | IBM Call Center for Commerce, Struts |
Timeline
- Sep 21, 2022 CVE Published
References
- https://nvd.nist.gov/vuln/detail/CVE-2013-1966 url
- https://bugzilla.redhat.com/show_bug.cgi?id=967656 url
- https://cwiki.apache.org/confluence/display/WW/S2-013 url
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-call-center-and-apache-struts-struts-upgrade-strategy-various-cves-see-below/ advisory