메뉴 건너뛰기

GREATUSER

cve

CVE-2017-9805

관리자 2017.09.16 14:00 조회 수 : 16

The REST Plugin in Apache Struts 2.1.2 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.


원문출처 : https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9805
번호 제목 글쓴이 날짜 조회 수
452 CVE-2017-14121 관리자 2017.09.04 15
451 CVE-2017-14117 관리자 2017.09.04 15
450 CVE-2017-14115 관리자 2017.09.04 15
449 CVE-2017-13648 (graphicsmagick) 관리자 2017.08.27 15
448 CVE-2017-7410 관리자 2017.04.04 15
447 CVE-2017-5685 관리자 2017.04.04 15
446 CVE-2018-1000009 관리자 2018.01.25 14
445 CVE-2018-1000008 관리자 2018.01.25 14
444 CVE-2017-16610 관리자 2018.01.25 14
443 CVE-2018-1000003 관리자 2018.01.25 14
442 CVE-2017-12119 관리자 2018.01.25 14
441 CVE-2017-14095 관리자 2018.01.25 14
440 CVE-2017-16661 관리자 2017.11.09 14
439 CVE-2017-16659 관리자 2017.11.09 14
438 CVE-2017-16643 관리자 2017.11.09 14
위로