CVE-2018-11776: Apache Struts vulnerable to remote command execution (RCE) due to improper input validation
(updated )
Apache Struts contains a Remote Code Execution when using results with no namespace and it’s upper actions have no or wildcard namespace. The same flaw exists when using a url tag with no value, action set, and it’s upper actions have no or wildcard namespace.
References
- cwiki.apache.org/confluence/display/WW/S2-057
- github.com/advisories/GHSA-cr6j-3jp9-rw65
- github.com/apache/struts
- github.com/apache/struts/commit/6e87474f9ad0549f07dd2c37d50a9ccd0977c6e
- github.com/hook-s3c/CVE-2018-11776-Python-PoC
- lgtm.com/blog/apache_struts_CVE-2018-11776
- lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E
- lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c@%3Cannounce.apache.org%3E
- nvd.nist.gov/vuln/detail/CVE-2018-11776
- psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0012
- security.netapp.com/advisory/ntap-20180822-0001
- security.netapp.com/advisory/ntap-20181018-0002
- web.archive.org/web/20180822160726/http://www.securityfocus.com/bid/105125
- web.archive.org/web/20200807025819/http://www.securitytracker.com/id/1041888
- web.archive.org/web/20201208145803/https://securitytracker.com/id/1041547
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-11776
- www.exploit-db.com/exploits/45260
- www.exploit-db.com/exploits/45262
- www.exploit-db.com/exploits/45367
- www.oracle.com/security-alerts/cpujul2020.html
- www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
Code Behaviors & Features
Detect and mitigate CVE-2018-11776 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →