Description
Apache Struts 2.3.20版本至2.3.28.1中存在远程代码执行漏洞。攻击者可借助特制的输入利用该漏洞生成恶意的负载，实施攻击。
Apache Struts2 远程代码执行漏洞（S2-035）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cwiki.apache.org/confluence/display/WW/S2-035
https://zone.ci/aliyun/ali_nvd/160062.html
https://www.tenable.com/plugins/nessus/91812
https://www.rapid7.com/db/vulnerabilities/struts-cve-2016-4436/
https://avd.aliyun.com/product?prod=struts&page=2
https://github.com/sie504/struts-s2-xxx