CVE-2017-9805
100Vexday Risk Score
Corrija agora. Ela está sob exploração confirmada pelo CISA e tem exploit funcional público.
ssvc Actcvss 8.1epss 99%
da publicação à arma0 dias
Publicada no NVD15 de set.
1ª PoC6 de set.
metasploit5 de set.
CISA KEV+1510d
probabilidade de exploração
99%top 1% das CVEs
exploração observada
simCISA + VulnCheck
40 exploit(s) público(s)
Ação exigida pela CISAprazo federal: 2022-05-03
Apply updates per vendor instructions.
Versões
Afetadas
maven/org.apache.struts:struts2-rest-plugin >= 2.5.0, < 2.5.13; maven/org.apache.struts:struts2-rest-plugin >= 2.1.1, < 2.3.34
Corrigidas em
maven/org.apache.struts:struts2-rest-plugin 2.5.13; maven/org.apache.struts:struts2-rest-plugin 2.3.34
Pesquisado e redigido com IA a partir do advisory do fornecedor e de análises públicas, com as fontes acima. Confira sempre a versão corrigida no advisory oficial antes de agir.
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Apache Software Foundation · Apache StrutsPoCs públicas encontradas — 40
exploitdbwww.exploit-db.com/exploits/42627não verificadogithubgithub.com/mazen160/struts-pwn_CVE-2017-9805★ 247githubgithub.com/luc10/struts-rce-cve-2017-9805★ 60githubgithub.com/chrisjd20/cve-2017-9805.py★ 21githubgithub.com/0x00-0x00/-CVE-2017-9805★ 15githubgithub.com/Lone-Ranger/apache-struts-pwn_CVE-2017-9805★ 5githubgithub.com/hahwul/struts2-rce-cve-2017-9805-ruby★ 3githubgithub.com/Shakun8/CVE-2017-9805★ 3githubgithub.com/jongmartinez/-CVE-2017-9805-★ 1githubgithub.com/0xd3vil/CVE-2017-9805-Exploit★ 1githubgithub.com/BeyondCy/S2-052★ 1githubgithub.com/UbuntuStrike/struts_rest_rce_fuzz-CVE-2017-9805-★ 1githubgithub.com/AvishkaSenadheera/CVE-2017-9805---Documentation---IT19143378★ 0githubgithub.com/NoSpaceAvailable/CVE-2017-9805_example_build★ 0githubgithub.com/Fl5xia/CVE-2017-9805★ 0githubgithub.com/7s26simon/CVE-2017-9805-S2-052★ 0githubgithub.com/Experience-rookie/struts-s2-052-deserialization-rce-lab★ 0githubgithub.com/UbuntuStrike/CVE-2017-9805-Apache-Struts-Fuzz-N-Sploit★ 0githubgithub.com/z3bd/CVE-2017-9805★ 0githubgithub.com/wifido/CVE-2017-9805-Exploit★ 0githubgithub.com/rvermeulen/apache-struts-cve-2017-9805★ 0vulncheckvulncheck.com/xdb/e922bd12de1dnão verificadovulncheckvulncheck.com/xdb/4629537f1e9anão verificadovulncheckvulncheck.com/xdb/d274ccdd5a14não verificadovulncheckvulncheck.com/xdb/c82af784f562não verificadovulncheckvulncheck.com/xdb/bd12f850ebbenão verificadovulncheckvulncheck.com/xdb/6300c647a9banão verificadocve_referencewww.exploit-db.com/exploits/42627/não verificadovulncheckvulncheck.com/xdb/5d8bf4c938d9não verificadovulncheckvulncheck.com/xdb/0ea476fd1c98não verificadovulncheckvulncheck.com/xdb/1fa5f1889be6não verificadovulncheckvulncheck.com/xdb/018ad44965ddnão verificadovulncheckvulncheck.com/xdb/1924e716f393não verificadovulncheckvulncheck.com/xdb/89e15b68ef36não verificadovulncheckvulncheck.com/xdb/dc089c9c541cnão verificadovulncheckvulncheck.com/xdb/78bca3ee80a0não verificadovulncheckvulncheck.com/xdb/43c0e5c2df29não verificadovulncheckvulncheck.com/xdb/c7c9392dc94bnão verificadovulncheckvulncheck.com/xdb/67009c2393e1não verificadovulncheckvulncheck.com/xdb/c9bed43f97a4não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://blogs.apache.org/foundation/entry/apache-struts-statement-on-equifaxhttps://bugzilla.redhat.com/show_bug.cgi?id=1488482https://cwiki.apache.org/confluence/display/WW/S2-052https://lgtm.com/blog/apache_struts_CVE-2017-9805https://security.netapp.com/advisory/ntap-20170907-0001/https://struts.apache.org/docs/s2-052.htmlhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-9805https://www.exploit-db.com/exploits/42627/https://www.kb.cert.org/vuls/id/112992http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.htmlhttp://www.securityfocus.com/bid/100609