جزئیات آسیب‌پذیری

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.

• http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html x_refsource_CONFIRM
• https://struts.apache.org/docs/s2-052.html x_refsource_CONFIRM
• http://www.securitytracker.com/id/1039263 vdb-entryx_refsource_SECTRACK
• http://www.securityfocus.com/bid/100609 vdb-entryx_refsource_BID
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2 vendor-advisoryx_refsource_CISCO
• https://bugzilla.redhat.com/show_bug.cgi?id=1488482 x_refsource_CONFIRM
• https://blogs.apache.org/foundation/entry/apache-struts-statement-on-equifax x_refsource_CONFIRM
• https://www.exploit-db.com/exploits/42627/ exploitx_refsource_EXPLOIT-DB
• https://lgtm.com/blog/apache_struts_CVE-2017-9805 x_refsource_MISC
• https://cwiki.apache.org/confluence/display/WW/S2-052 x_refsource_CONFIRM
• https://security.netapp.com/advisory/ntap-20170907-0001/ x_refsource_CONFIRM
• https://www.kb.cert.org/vuls/id/112992 third-party-advisoryx_refsource_CERT-VN
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-9805 government-resource