CVE-2017-5638— Apache Struts 2 输入验证错误漏洞
一分钟漏洞结论
影响对象
Apache Software Foundation Apache Struts
利用判断
已确认在野利用，应立即处置
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Apache Struts是美国阿帕奇（Apache）软件基金会的一个开源项目，是一套用于创建企业级Java Web应用的开源MVC框架，主要提供两个版本框架产品，Struts 1和Struts 2。 Apache Struts 2 2.3.32之前的2 2.3.x版本和2.5.10.1之前的2.5.x版本中的Jakarta Multipart解析器存在安全漏洞，该漏洞源于程序没有正确处理文件上传。远程攻击者可借助带有＃cmd=字符串的特制Content-Type HTTP头利用该漏洞执行任意命令。
公开利用映射 4
Metasploit · 1
struts2_content_type_ognl.rb [exploit]
Nuclei · 1
CVE-2017-5638.yaml [template]
已观察到在野利用
github_trending · low
cisa_kev · confirmed
可能的 ATT&CK 技术 1 AI
T1190 · Exploit Public-Facing Application
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2017-5638 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Apache Struts 2 输入验证错误漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Apache Struts是美国阿帕奇（Apache）软件基金会的一个开源项目，是一套用于创建企业级Java Web应用的开源MVC框架，主要提供两个版本框架产品，Struts 1和Struts 2。 Apache Struts 2 2.3.32之前的2 2.3.x版本和2.5.10.1之前的2.5.x版本中的Jakarta Multipart解析器存在安全漏洞，该漏洞源于程序没有正确处理文件上传。远程攻击者可借助带有＃cmd=字符串的特制Content-Type HTTP头利用该漏洞执行任意命令。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Apache Software Foundation | Apache Struts | 2.3.x before 2.3.32 | - |
|
二、漏洞 CVE-2017-5638 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Struts2 S2-045（CVE-2017-5638）Vulnerability environment - http://www.mottoin.com/97954.html | https://github.com/PolarisLab/S2-045 | POC详情 |
| 2 | Struts2 S2-045（CVE-2017-5638）Exp with GUI | https://github.com/Flyteas/Struts2-045-Exp | POC详情 |
| 3 | None | https://github.com/bongbongco/cve-2017-5638 | POC详情 |
| 4 | S2-045 漏洞 POC-TOOLS CVE-2017-5638 | https://github.com/jas502n/S2-045-EXP-POC-TOOLS | POC详情 |
| 5 | Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638) | https://github.com/mthbernardes/strutszeiro | POC详情 |
| 6 | Example PoC Code for CVE-2017-5638 | Apache Struts Exploit | https://github.com/xsscx/cve-2017-5638 | POC详情 |
| 7 | Demo Application and Exploit | https://github.com/immunio/apache-struts2-CVE-2017-5638 | POC详情 |
| 8 | This is Valve for Tomcat7 to block Struts 2 Remote Code Execution vulnerability (CVE-2017-5638) | https://github.com/Masahiro-Yamada/OgnlContentTypeRejectorValve | POC详情 |
| 9 | Tweaking original PoC (https://github.com/rapid7/metasploit-framework/issues/8064) to work on self-signed certificates | https://github.com/aljazceru/CVE-2017-5638-Apache-Struts2 | POC详情 |
| 10 | test struts2 vulnerability CVE-2017-5638 in Mac OS X | https://github.com/sjitech/test_struts2_vulnerability_CVE-2017-5638 | POC详情 |
| 11 | None | https://github.com/jrrombaldo/CVE-2017-5638 | POC详情 |
| 12 | CVE: 2017-5638 in different formats | https://github.com/random-robbie/CVE-2017-5638 | POC详情 |
| 13 | detection for Apache Struts recon and compromise | https://github.com/initconf/CVE-2017-5638_struts | POC详情 |
| 14 | An exploit for Apache Struts CVE-2017-5638 | https://github.com/mazen160/struts-pwn | POC详情 |
| 15 | These are just some script which you can use to detect and exploit the Apache Struts Vulnerability (CVE-2017-5638) | https://github.com/ret2jazzy/Struts-Apache-ExploitPack | POC详情 |
| 16 | A php based exploiter for CVE-2017-5638. | https://github.com/lolwaleet/ExpStruts | POC详情 |
| 17 | Example PHP Exploiter for CVE-2017-5638 | https://github.com/oktavianto/CVE-2017-5638-Apache-Struts2 | POC详情 |
| 18 | cve-2017-5638 Vulnerable site sample | https://github.com/jrrdev/cve-2017-5638 | POC详情 |
| 19 | Struts2 RCE CVE-2017-5638 non-intrusive check shell script | https://github.com/opt9/Strutshock | POC详情 |
| 20 | Apache Struts (CVE-2017-5638) Shell | https://github.com/falcon-lnhg/StrutsShell | POC详情 |
| 21 | None | https://github.com/bhagdave/CVE-2017-5638 | POC详情 |
| 22 | st2-046-poc CVE-2017-5638 | https://github.com/jas502n/st2-046-poc | POC详情 |
| 23 | S2-046|S2-045: Struts 2 Remote Code Execution vulnerability（CVE-2017-5638） | https://github.com/KarzsGHR/S2-046_S2-045_POC | POC详情 |
| 24 | CVE-2017-5638 | https://github.com/gsfish/S2-Reaper | POC详情 |
| 25 | None | https://github.com/mcassano/cve-2017-5638 | POC详情 |
| 26 | Struts2 RCE CVE-2017-5638 CLI shell | https://github.com/opt9/Strutscli | POC详情 |
| 27 | Strutsy - Mass exploitation of Apache Struts (CVE-2017-5638) vulnerability | https://github.com/tahmed11/strutsy | POC详情 |
| 28 | Apache Struts 2.0 RCE vulnerability - Allows an attacker to inject OS commands into a web application through the content-type header | https://github.com/payatu/CVE-2017-5638 | POC详情 |
| 29 | CVE-2017-5638 | https://github.com/Aasron/Struts2-045-Exp | POC详情 |
| 30 | An exploit for CVE-2017-5638 Remote Code Execution (RCE) Vulnerability in Apache Struts 2 | https://github.com/SpiderMate/Stutsfi | POC详情 |
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2017-5638 的情报信息
请登录查看更多情报信息。
CVE-2017-5638 厂商安全公告 (6)
-
🔗 https://security.netapp.com/advisory/ntap-20170310-0001/ x_refsource_CONFIRM
-
🔗 https://support.lenovo.com/us/en/product_security/len-14200 x_refsource_CONFIRM
-
🔗 http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html x_refsource_CONFIRM
-
-
-
CVE-2017-5638 公开利用代码 (3)
-
🔗 https://packetstormsecurity.com/files/141494/S2-45-poc.py.txt x_refsource_MISC
-
-
CVE-2017-5638 概念验证 (1)
-
🔗 https://github.com/rapid7/metasploit-framework/issues/8064 x_refsource_MISC
CVE-2017-5638 邮件列表归档 (2)
-
🔗 https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E mailing-list x_refsource_MLIST
-
🔗 https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E mailing-list x_refsource_MLIST
CVE-2017-5638 安全博客文章 (3)
CVE-2017-5638 新闻报道 (1)
CVE-2017-5638 其他参考 (14)
-
🔗 https://isc.sans.edu/diary/22169 x_refsource_MISC
-
🔗 https://struts.apache.org/docs/s2-046.html x_refsource_CONFIRM
-
🔗 http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-002.txt x_refsource_CONFIRM
-
-
-
🔗 https://cwiki.apache.org/confluence/display/WW/S2-046 x_refsource_CONFIRM
-
-
-
🔗 https://twitter.com/theog150/status/841146956135124993 x_refsource_MISC
-
🔗 https://nmap.org/nsedoc/scripts/http-vuln-cve2017-5638.html x_refsource_MISC
-
🔗 https://cwiki.apache.org/confluence/display/WW/S2-045 x_refsource_CONFIRM
-
🔗 https://struts.apache.org/docs/s2-045.html x_refsource_CONFIRM
-
-
IV. Related Vulnerabilities
V. Comments for CVE-2017-5638
暂无评论