virus logo FortiClient Vulnerability

Apache Struts CVE-2017-9805 Code Injection Vulnerability

description-logoDescription

The REST Plugin is using aXStreamHandlerwith an instance of XStream for deserialization without any type filtering and this can lead to Remote Code Executionwhen deserializing XML payloads.

affected-products-logoAffected Applications

Apache Struts

CVE References

CVE-2017-9805

Other References

https://cwiki.apache.org/confluence/display/WW/Security+Bulletins
ID 49295
Created Jan 17, 2020
Description
Updated		 Dec 14, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
Coverage FortiClient
OS Linux
Vendor Apache
Patch manual
Application Apache Struts