CVE-2008-6504
ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 36.6%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a \u0023 representation for the # character.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 36.60% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- opensymphony/xwork · apache/struts
- Source
- cve@mitre.org
References
- http://fisheye6.atlassian.com/cru/CR-9/Patch
- http://issues.apache.org/struts/browse/WW-2692Exploit
- http://jira.opensymphony.com/browse/XW-641Exploit
- http://osvdb.org/49732
- http://secunia.com/advisories/32495Vendor Advisory
- http://secunia.com/advisories/32497Vendor Advisory
- http://struts.apache.org/2.x/docs/s2-003.htmlExploit
- http://www.securityfocus.com/bid/32101
- http://www.vupen.com/english/advisories/2008/3003Vendor Advisory
- http://www.vupen.com/english/advisories/2008/3004
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46328
- http://fisheye6.atlassian.com/cru/CR-9/Patch
- http://issues.apache.org/struts/browse/WW-2692Exploit
- http://jira.opensymphony.com/browse/XW-641Exploit
- http://osvdb.org/49732
- http://secunia.com/advisories/32495Vendor Advisory
- http://secunia.com/advisories/32497Vendor Advisory
- http://struts.apache.org/2.x/docs/s2-003.htmlExploit
- http://www.securityfocus.com/bid/32101
- http://www.vupen.com/english/advisories/2008/3003Vendor Advisory
- http://www.vupen.com/english/advisories/2008/3004
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46328
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.