CVE-2012-0394
NUCLEIApache Struts 2.0.0-2.3.16 - Remote Code Execution via DebuggingInterceptor
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-0394.
PoCs published by Metasploit, SEC Consult, Johannes Dahse, Andreas Nusser, Alvaro, s PoC, avoided surname because of the spanish char, sorry about that :\, including Metasploit module exploits/multi/http/struts_dev_mode.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits CVE-2012-0394, a remote command execution vulnerability in Apache Struts 2 when running in developer mode. It leverages OGNL expression evaluation to upload and execute a malicious JAR payload, achieving RCE on vulnerable systems.
Description
The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOTE: the vendor characterizes this behavior as not "a security vulnerability itself.
Exploits (3)
This Metasploit module exploits CVE-2012-0394, a remote command execution vulnerability in Apache Struts 2 when running in developer mode. It leverages OGNL expression evaluation to upload and execute a malicious JAR payload, achieving RCE on vulnerable systems.
The exploit demonstrates multiple critical vulnerabilities in Apache Struts2, including remote command execution via ExceptionDelegator, CookieInterceptor, and DebuggingInterceptor, as well as arbitrary file overwrite via ParametersInterceptor. These vulnerabilities arise from OGNL expression injection and improper parameter filtering.
This Metasploit module exploits a remote command execution vulnerability in Apache Struts 2 when running in developer mode. It leverages OGNL expression evaluation to upload and execute a malicious JAR file, achieving arbitrary Java code execution.
Nuclei Templates (1)
html:"Struts Problem Report" || http.title:"struts2 showcase" || http.html:"struts problem report" || http.html:"apache struts"
body="struts problem report" || title="struts2 showcase" || body="apache struts"