Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Struts 安全绕过漏洞
Vulnerability Description
Apache Struts是美国阿帕奇(Apache)软件基金会负责维护的一个开源项目,是一套用于创建企业级Java Web应用的开源MVC框架,主要提供两个版本框架产品,Struts 1和Struts 2。 Apache Struts中存在安全绕过漏洞。攻击者可利用该漏洞绕过安全限制,执行未授权操作。
CVSS Information
N/A
Vulnerability Type
N/A