CVE-2017-9791 Apache Struts 1 Improper Input Validation Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply updates per vendor instructions.

Campagnes de rançongiciel Non constatée à ce jour

Faiblesse CWE-20

Description

The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Apache Struts	Versions non publiées

Autres CVE de Apache Struts

Les 33 CVE de Apache Struts →

CVE-2026-104714 Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache… Non notée CVE-2026-104713 Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin Non notée CVE-2026-104712 Asymmetric resource consumption (amplification) vulnerability in Apache Struts Non notée CVE-2026-104711 Improper neutralization of special elements used in an expression language statement ('Expression Language Injection')… Non notée