virus logo FortiClient Vulnerability

Apache Struts CVE-2018-11776 Input Validation Bypass Vulnerability

description-logoDescription

It is possible to perform a RCE attack whennamespacevalue isn't set for a result defined in underlying xml configurations and in same time, its upper action(s) configurations have no or wildcardnamespace. Same possibility when usingurltag which doesnt havevalueandactionset and in same time, its upper action(s) configurations have no or wildcardnamespace.

affected-products-logoAffected Applications

Apache Struts

CVE References

CVE-2018-11776

Other References

https://cwiki.apache.org/confluence/display/WW/Security+Bulletins
ID 50684
Created Jan 17, 2020
Description
Updated		 Dec 14, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
Coverage FortiClient
OS Linux
Vendor Apache
Patch manual
Application Apache Struts