CVE-2020-17530 Apache Struts Remote Code Execution Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply updates per vendor instructions.

Campagnes de rançongiciel Non constatée à ce jour

Faiblesse CWE-917

Description

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Apache Struts	Versions non publiées

Autres CVE de Apache Struts

Les 33 CVE de Apache Struts →

CVE-2026-104714 Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache… Non notée CVE-2026-104713 Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin Non notée CVE-2026-104712 Asymmetric resource consumption (amplification) vulnerability in Apache Struts Non notée CVE-2026-104711 Improper neutralization of special elements used in an expression language statement ('Expression Language Injection')… Non notée