Package · Maven

org.apache.struts:struts2-rest-plugin

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.1

CVE-2017-9805 Exploited Public exploit EPSS 99%

REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloa…

Apache Software Foundation Apache Struts org.apache.struts:struts2-rest-plugin Maven

Sep 15, 2017
KEV Nov 3, 2021
Critical 9.8

CVE-2016-4438 Public exploit EPSS 17%

Arbitrary code execution in Apache Struts 2

The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression.

org.apache.struts:struts2-core org.apache.struts:struts2-rest-plugin Maven

Jul 4, 2016