CVE-2013-4212

EPSS 81.1%

Vexday Risk Score

60Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 81.1%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Ciclo de vida

31 oct 2013Exploit Metasploit disponible

27 nov 2013PoC pública

07 dic 2013Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol, which uses a subclass of UIAction, aka "OGNL Injection."

Productos afectados

n/a · n/a

PoCs públicas encontradas — 2

cve_referencewww.exploit-db.com/exploits/29859no verificado exploitdbwww.exploit-db.com/exploits/29859no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://rollerweblogger.org/project/entry/apache_roller_5_0_2 http://secunia.com/advisories/55862 http://secunia.com/advisories/55877 http://security.coverity.com/advisory/2013/Oct/remote-code-execution-in-apache-roller-via-ognl-injection.html https://exchange.xforce.ibmcloud.com/vulnerabilities/89239 http://www.exploit-db.com/exploits/29859 http://www.osvdb.org/100342