GSD-2016-2176

Exploit Intelligence

• Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
• Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)
• A practical lab demonstrating the exploitation of a critical Remote Code Execution (RCE) vulnerability in Apache Struts2 (CVE-2017-5638) using Vulhub Docker environments. Includes setup instructions and commands to run the vulnerable container. (github-poc)
• ACharaf06/CVE-2017-5638-Attack-and-Defense (github-poc)
• CVE-2017-5638- PoC (github-poc)
• A hands-on simulation of CVE-2017-5638 (Apache Struts2 RCE), showcasing exploit reproduction, OS-level command execution, and mitigations such as input sanitization and endpoint monitoring. Built in Python/Flask with Jupyter notebook demos (github-poc)
• MuhammadAbdullah192/CVE-2017-5638-Remote-Code-Execution-Apache-Struts2-EXPLOITATION (github-poc)
• Apache Struts2 CVE-2017-5638 (Safe Educational Demo) (github-poc)
• Real-time anomaly detection system for Apache Struts CVE-2017-5638 exploit using streaming analytics, 3-gram byte analysis, and Count-Min Sketch. Detects RCE attacks without signatures, with <5ms latency and <0.1% false positives. (github-poc)
• QHxDr-dz/CVE-2017-5638 (github-poc)

…and 81 more exploits

Timeline

• Mar 6, 2017 CVE Published
• Oct 2, 2020 PoC Published
• Nov 6, 2020 PoC Published
• Sep 6, 2021 PoC Published
• Oct 9, 2024 PoC Published
• Dec 12, 2024 PoC Published
• Mar 28, 2025 PoC Published
• Sep 26, 2025 PoC Published