CVE-2017-9805
100Vexday Risk Score
Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.
ssvc Actcvss 8.1epss 99%
de la publicación al arma0 días
Publicada en NVD15 sept
1ª PoC6 sept
metasploit5 sept
CISA KEV+1510d
probabilidad de explotación
99%top 1% de las CVE
explotación observada
síCISA + VulnCheck
41 exploit(s) público(s)
Acción exigida por CISAplazo federal: 2022-05-03
Apply updates per vendor instructions.
Versiones
Afectadas
maven/org.apache.struts:struts2-rest-plugin >= 2.5.0, < 2.5.13; maven/org.apache.struts:struts2-rest-plugin >= 2.1.1, < 2.3.34
Corregidas en
maven/org.apache.struts:struts2-rest-plugin 2.5.13; maven/org.apache.struts:struts2-rest-plugin 2.3.34
Investigado y redactado con IA a partir del advisory del fabricante y análisis públicos, con las fuentes citadas. Verifica siempre la versión corregida en el advisory oficial antes de actuar.
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Apache Software Foundation · Apache StrutsPoCs públicas encontradas — 41
exploitdbwww.exploit-db.com/exploits/42627no verificadogithubgithub.com/mazen160/struts-pwn_CVE-2017-9805★ 247githubgithub.com/luc10/struts-rce-cve-2017-9805★ 60githubgithub.com/chrisjd20/cve-2017-9805.py★ 21githubgithub.com/0x00-0x00/-CVE-2017-9805★ 15githubgithub.com/Lone-Ranger/apache-struts-pwn_CVE-2017-9805★ 5githubgithub.com/hahwul/struts2-rce-cve-2017-9805-ruby★ 3githubgithub.com/Shakun8/CVE-2017-9805★ 3githubgithub.com/jongmartinez/-CVE-2017-9805-★ 1githubgithub.com/BeyondCy/S2-052★ 1githubgithub.com/0xd3vil/CVE-2017-9805-Exploit★ 1githubgithub.com/UbuntuStrike/struts_rest_rce_fuzz-CVE-2017-9805-★ 1githubgithub.com/NoSpaceAvailable/CVE-2017-9805_example_build★ 0githubgithub.com/UbuntuStrike/CVE-2017-9805-Apache-Struts-Fuzz-N-Sploit★ 0githubgithub.com/AvishkaSenadheera/CVE-2017-9805---Documentation---IT19143378★ 0githubgithub.com/wifido/CVE-2017-9805-Exploit★ 0githubgithub.com/rvermeulen/apache-struts-cve-2017-9805★ 0githubgithub.com/z3bd/CVE-2017-9805★ 0githubgithub.com/Fl5xia/CVE-2017-9805★ 0githubgithub.com/7s26simon/CVE-2017-9805-S2-052★ 0githubgithub.com/Experience-rookie/struts-s2-052-deserialization-rce-lab★ 0vulncheckvulncheck.com/xdb/018ad44965ddno verificadovulncheckvulncheck.com/xdb/1924e716f393no verificadovulncheckvulncheck.com/xdb/89e15b68ef36no verificadovulncheckvulncheck.com/xdb/dc089c9c541cno verificadovulncheckvulncheck.com/xdb/78bca3ee80a0no verificadovulncheckvulncheck.com/xdb/43c0e5c2df29no verificadovulncheckvulncheck.com/xdb/c7c9392dc94bno verificadovulncheckvulncheck.com/xdb/67009c2393e1no verificadovulncheckvulncheck.com/xdb/c9bed43f97a4no verificadovulncheckvulncheck.com/xdb/92481de257f5no verificadovulncheckvulncheck.com/xdb/5d8bf4c938d9no verificadovulncheckvulncheck.com/xdb/e922bd12de1dno verificadovulncheckvulncheck.com/xdb/6300c647a9bano verificadovulncheckvulncheck.com/xdb/bd12f850ebbeno verificadovulncheckvulncheck.com/xdb/c82af784f562no verificadovulncheckvulncheck.com/xdb/d274ccdd5a14no verificadovulncheckvulncheck.com/xdb/4629537f1e9ano verificadocve_referencewww.exploit-db.com/exploits/42627/no verificadovulncheckvulncheck.com/xdb/0ea476fd1c98no verificadovulncheckvulncheck.com/xdb/1fa5f1889be6no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://blogs.apache.org/foundation/entry/apache-struts-statement-on-equifaxhttps://bugzilla.redhat.com/show_bug.cgi?id=1488482https://cwiki.apache.org/confluence/display/WW/S2-052https://lgtm.com/blog/apache_struts_CVE-2017-9805https://security.netapp.com/advisory/ntap-20170907-0001/https://struts.apache.org/docs/s2-052.htmlhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-9805https://www.exploit-db.com/exploits/42627/https://www.kb.cert.org/vuls/id/112992http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.htmlhttp://www.securityfocus.com/bid/100609