摘要:
Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.
安全等级: Low
公告ID: KylinSec-SA-2022-1708
发布日期: 2022年7月30日
关联CVE: CVE-2011-3923
Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.
cve名称 | 产品 | 组件 | 是否受影响 |
---|---|---|---|
CVE-2011-3923 | KY3.4-4A | struts | Unaffected |
CVE-2011-3923 | KY3.4-5 | struts | Unaffected |
CVE-2011-3923 | KY3.5.1 | struts | Unaffected |