CVE-2017-9805

Apache Struts Deserialization of Untrusted Data Vulnerability

Struts

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.

15. Sep 2017

Ausgewertete Quellen

• Red Hat
  https://bugzilla.redhat.com/show_bug.cgi?id=1488482
• Hersteller
  https://blogs.apache.org/foundation/entry/apache-struts-statement-on-equifax
• Hersteller
  https://cwiki.apache.org/confluence/display/WW/S2-052
• Hersteller
  https://struts.apache.org/docs/s2-052.html
• Hinweis
  http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html
• Hinweis
  http://www.securityfocus.com/bid/100609
• Hinweis
  http://www.securitytracker.com/id/1039263
• Hinweis
  https://security.netapp.com/advisory/ntap-20170907-0001/
• Hinweis
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2
• Hinweis
  https://www.exploit-db.com/exploits/42627/
• Hinweis
  https://www.kb.cert.org/vuls/id/112992
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-9805
• CISA
  Apache Struts Deserialization of Untrusted Data Vulnerability
• NVD
  CVE-2017-9805