ET WEB_SPECIFIC_APPS Possible Apache Struts OGNL Expression Injection (CVE-2017-5638)
Sourceet/open
CreatedMarch 8, 2017
UpdatedAugust 20, 2020
Classificationweb-application-attack
alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Possible Apache Struts OGNL Expression Injection (CVE-2017-5638)"; flow:established,to_server; http.header; content:"apache"; http.content_type; content:"ProcessBuilder"; content:".struts"; distance:0; reference:cve,2017-5638; reference:url,github.com/rapid7/metasploit-framework/issues/8064; classtype:web-application-attack; sid:2024038; rev:4; metadata:affected_product Apache_Struts2, attack_target Web_Server, created_at 2017_03_08, cve CVE_2017_5638, deployment Perimeter, performance_impact Low, confidence Medium, signature_severity Major, tag CISA_KEV, updated_at 2020_08_20;)
References
Metadata
affected productApache_Struts2
attack targetWeb_Server
created at2017_03_08
deploymentPerimeter
performance impactLow
confidenceMedium
signature severityMajor
tagCISA_KEV
updated at2020_08_20
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!