Saturday, February 15, 2025
HomeCVE/vulnerabilityNew Apache Struts Vulnerability Allows Attackers to Take Control Over Web Servers

New Apache Struts Vulnerability Allows Attackers to Take Control Over Web Servers

Published on

SIEM as a Service

Follow Us on Google News

Apache Struts is a free and open-source framework used to build Java web applications.This is not the first remote code execution vulnerability discovered on Apache Struts.

Security Expert from Man Yue Mo from lgtm found a remote code execution vulnerability in Apache Struts. This vulnerability has been assigned with Security Bulletin CVE-2017-9805

Experts found the vulnerability due to unsafe deserialization in Java.In the Last March also an RCE vulnerability reported by Nike Zheng with Struts 2.3.31 & 2.3.5.

Also Read :  ApacheStruts2 Remote Code Execution Vulnerability S2-046

What is Java Deserialization

Java deserialization weakness influences essentially all applications that acknowledge serialized Java objects and gives attackers an approach to increase a complete remote control of an application server.

The vulnerability enables aggressors to obtain total control over the server on which the application is facilitated and make a wide range of destruction.

The vulnerability enables aggressors to obtain total control over the server on which the application is facilitated and make a wide range of destruction.

As indicated by the researcher, the exploit is caused by the way Struts deserializes unsanitized client provided information.

An aggressor could transfer a malicious file and obtain control over an application subsequent to increasing remote code execution rights on the objective’s Struts-based application server.

An aggressor could transfer a malicious file and obtain control over an application subsequent to increasing remote code execution rights on the objective’s Struts-based application server.

Due to the severity of the vulnerability Man Yue he didn’t disclose more details about this vulnerability.He reported the Vulnerability to the vendor on 17 July 2017 and it has been fixed with Struts version 2.5.13 released yesterday.

This new version contains a fix for many security vulnerabilities.

  • CVE-2017-9793 – DoS attack is possible when using outdated XStream library with the Struts REST plugin
  • CVE-2017-9804 – Possible DoS attack when using URLValidator

Now the version has been published, Server administrators are strongly advised to update their Apache Struts as soon as possible.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Fake BSOD Attack Launched via Malicious Python Script

A peculiar malicious Python script has surfaced, employing an unusual and amusing anti-analysis trick...

SocGholish Malware Dropped from Hacked Web Pages using Weaponized ZIP Files

A recent wave of cyberattacks leveraging the SocGholish malware framework has been observed using...

Lazarus Group Targets Developers Worldwide with New Malware Tactic

North Korea's Lazarus Group, a state-sponsored cybercriminal organization, has launched a sophisticated global campaign...

North Korean IT Workers Penetrate Global Firms to Install System Backdoors

In a concerning escalation of cyber threats, North Korean IT operatives have infiltrated global...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

NVIDIA Container Toolkit Vulnerable to Code Execution Attacks

NVIDIA has issued a critical security update to address a high-severity vulnerability discovered in...

Apache Fineract SQL Injection Vulnerability Allows Malicious Data Injection

The Apache Software Foundation has disclosed a critical SQL injection vulnerability in its widely...

AMD Ryzen Flaw Enables Code Execution Through DLL Hijacking

A security vulnerability has been identified in the AMD Ryzenâ„¢ Master Utility, a performance-tuning tool for AMD Ryzenâ„¢...