CVE-2012-0394

This Metasploit module exploits CVE-2012-0394, a remote command execution vulnerability in Apache Struts 2 when running in developer mode. It leverages OGNL expression evaluation to upload and execute a malicious JAR payload, achieving RCE on vulnerable systems.

The exploit demonstrates multiple critical vulnerabilities in Apache Struts2, including remote command execution via ExceptionDelegator, CookieInterceptor, and DebuggingInterceptor, as well as arbitrary file overwrite via ParametersInterceptor. These vulnerabilities arise from OGNL expression injection and improper parameter filtering.

This Metasploit module exploits a remote command execution vulnerability in Apache Struts 2 when running in developer mode. It leverages OGNL expression evaluation to upload and execute a malicious JAR file, achieving arbitrary Java code execution.