Description
Apache Struts是美国阿帕奇（Apache）软件基金会负责维护的一个开源项目，是一套用于创建企业级Java Web应用的开源MVC框架，主要提供两个版本框架产品，Struts 1和Struts 2。 ApacheStruts22.3.14.2之前版本中存在代码注入漏洞。远程攻击者可借助特制的请求利用该漏洞执行任意的OGNL代码。
Apache Struts 2 代码注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/hgschool/p/17035322.html
https://cloud.tencent.com/developer/article/2433527
https://xxzx.gzhmu.edu.cn/info/1080/2063.htm
https://blog.csdn.net/Myon5/article/details/136633267
https://it.ruc.edu.cn/wlaq/6a6b752e54c04534a8c1c5592acf56b2.htm
https://github.com/Vancir/s2-052-reproducing
https://www.anquanke.com/post/id/266386
http://www.ol4three.com/2020/12/16/WEB/Exploit/struts2/Struts2-S2-061-%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2020-17530-%E5%A4%8D%E7%8E%B0/
https://blog.nsfocus.net/apache-struts2-remote-code-execution-vulnerability-analysis-program/
https://www.javasec.org/java-vuls/Struts/Struts2-5.html
https://drunkmars.top/2021/08/20/struts2/
https://nic.swu.edu.cn/info/1008/1091.htm
https://baike.baidu.com/item/struts2%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9E/8277162
https://zone.huoxian.cn/d/1239-apache-struts2
https://www.cisecurity.org/advisory/a-vulnerability-in-apache-struts2-could-allow-for-remote-code-execution_2024-141
https://blog.qualys.com/vulnerabilities-threat-research/2021/09/21/apache-struts-2-double-ognl-evaluation-vulnerability-cve-2020-17530
https://www.dynatrace.com/news/blog/the-anatomy-of-broken-apache-struts-2-a-technical-deep-dive-into-cve-2024-53677/
https://www.acunetix.com/vulnerabilities/web/apache-struts2-remote-code-execution-vulnerability/
https://www.cyber.gc.ca/en/alerts-advisories/cve-2024-53677-vulnerability-impacting-apache-struts-2