CVE-2013-2248 PoC — Apache Struts 多个开放重定向漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-2248.yaml

Associated Vulnerability

Title:Apache Struts 多个开放重定向漏洞 (CVE-2013-2248)
Description:Apache Struts是美国阿帕奇（Apache）软件基金会负责维护的一个开源项目，是一套用于创建企业级Java Web应用的开源MVC框架，主要提供两个版本框架产品，Struts 1和Struts 2。 Apache Struts 2.0.0至2.3.15版本中存在多个开放重定向漏洞，该漏洞源于程序没有正确过滤用户提交的输入。攻击者可利用这些漏洞构造特制的URI诱使用户跟随，用户打开连接将被重定向到攻击者控制的网站，有助于钓鱼攻击，也可能存在其他形式的攻击。

Description

Apache Struts is prone to multiple open-redirection vulnerabilities because the application fails to properly sanitize user-supplied input.

File Snapshot


 id: CVE-2013-2248

info:
  name: Apache Struts - Multiple Open Redirection Vulnerabilities
  author:

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!