CVE-2013-2248
NUCLEIApache Struts 2.0.0-2.3.15 - Open Redirect via redirect: or redirectAction: Prefix
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-2248. PoCs published by Takeshi Terada. A Nuclei detection template is also available.
AI-analyzed exploit summary The provided text describes an open-redirection vulnerability in Apache Struts versions prior to 2.3.15.1. It includes example URLs demonstrating how an attacker could exploit the vulnerability by crafting URIs with malicious redirect parameters.
Description
Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix.
Exploits (1)
The provided text describes an open-redirection vulnerability in Apache Struts versions prior to 2.3.15.1. It includes example URLs demonstrating how an attacker could exploit the vulnerability by crafting URIs with malicious redirect parameters.
Nuclei Templates (1)
http.html:"apache struts" || http.title:"struts2 showcase" || http.html:"struts problem report"
body="struts problem report" || title="struts2 showcase" || body="apache struts"