Threat intelligence / Vulnerability
CVE-2017-9805
Apache Struts REST Plugin uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to remote code execution when deserializing XML payloads.
Vulnerability
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03
Confidence
—
Apache Struts REST Plugin uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to remote code execution when deserializing XML payloads.
Labels
CISA KEV context
Vendor / productApache Struts
Added2021-11-03
Due date2022-05-03
2 recorded
Relationships
2 external