CVE-2012-0392 PoC — Apache Struts ‘CookieInterceptor’组件权限许可和访问控制问题漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0392.yaml

Associated Vulnerability

Title:Apache Struts ‘CookieInterceptor’组件权限许可和访问控制问题漏洞 (CVE-2012-0392)
Description:Apache Struts是美国阿帕奇（Apache）软件基金会负责维护的一个开源项目，是一套用于创建企业级Java Web应用的开源MVC框架，主要提供两个版本框架产品，Struts 1和Struts 2。 Apache Struts2 2.3.1.1之前版本中的CookieInterceptor组件中存在漏洞，该漏洞源于未能使用parameter-name白名单。远程攻击者可利用该漏洞借助特制的HTTP Cookie头执行任意命令，该头通过static方法触发Java代码执行。

Description

The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method.

File Snapshot


 id: CVE-2012-0392

info:
  name: Apache Struts2 S2-008 RCE
  author: pikpikcu
  severity: medium
  d

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!