CVE-2017-12611
CRITICAL EXPLOITED IN THE WILD NUCLEIApache Struts 2.0.0-2.3.33 and 2.5-2.5.10.1 - Remote Code Execution via Freemarker Tag Expression
Title source: llmExploitation Summary
CVE-2017-12611 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 6 public exploits from researchers including brianwrf, qazbnm456, xbl3. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit leverages CVE-2017-12611, a remote code execution vulnerability in Apache Struts 2 due to improper handling of OGNL expressions. The payload constructs a malicious OGNL expression to execute arbitrary commands on the target system.
Description
In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a RCE attack.
Exploits (6)
This exploit leverages CVE-2017-12611, a remote code execution vulnerability in Apache Struts 2 due to improper handling of OGNL expressions. The payload constructs a malicious OGNL expression to execute arbitrary commands on the target system.
This repository provides a technical writeup and references for CVE-2017-12611 (S2-053), a vulnerability in Apache Struts2. It includes links to external analyses and PoC repositories but does not contain direct exploit code.
This repository contains a functional exploit for CVE-2017-12611, a remote code execution vulnerability in Apache Struts 2. The exploit leverages OGNL injection to execute arbitrary commands on the target system.
This repository provides a technical writeup and references for CVE-2017-12611 (S2-053), a vulnerability in Apache Struts2. It includes links to external analyses and PoC repositories but does not contain direct exploit code.
This repository contains a functional OGNL injection payload for CVE-2017-12611, targeting Apache Struts 2. The payload executes arbitrary commands by manipulating OGNL context and ProcessBuilder, demonstrating RCE.
This repository provides a working proof-of-concept exploit for CVE-2017-12611, a remote code execution vulnerability in Apache Struts 2.3.20.1. The exploit uses an OGNL injection payload to execute arbitrary commands on the target system.
Nuclei Templates (1)
http.html:"apache struts" || http.title:"struts2 showcase" || http.html:"struts problem report"
body="struts problem report" || title="struts2 showcase" || body="apache struts"
References (5)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H