CVE-2018-11776

Katalog CVE

CVSS 8.1 · High KEV · sudah dieksploitasi EPSS 100,0%

Kerentanan pada apache struts, netapp active iq unified manager +6 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD. Masuk katalog KEV CISA pada 3 November 2021, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn't have value and action set and in same time, its upper package have no or wildcard namespace.

Rincian

Terbit di NVD

22 Agustus 2018

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

100,0% peluang dieksploitasi; lebih tinggi dari 99,9% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Apache Struts Remote Code Execution Vulnerability

Masuk KEV

3 November 2021

Tenggat CISA

3 Mei 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.oracle.com/technetwork/security-advisory/alert-cve-2018-11776-5072787.html patch · advisory pihak ketiga
• http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html patch · advisory pihak ketiga
• https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html patch · advisory pihak ketiga
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-11776 pemerintah AS
• http://packetstormsecurity.com/files/172830/Apache-Struts-Remote-Code-Execution.html advisory pihak ketiga · vdb entry
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-005.txt broken link · mailing list · advisory pihak ketiga
• http://www.securityfocus.com/bid/105125 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1041547 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1041888 broken link · advisory pihak ketiga · vdb entry
• https://cwiki.apache.org/confluence/display/WW/S2-057 issue tracking · advisory pihak ketiga
• https://github.com/hook-s3c/CVE-2018-11776-Python-PoC exploit · advisory pihak ketiga
• https://lgtm.com/blog/apache_struts_CVE-2018-11776 exploit · advisory pihak ketiga
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0012 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20180822-0001/ advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20181018-0002/ advisory pihak ketiga
• https://www.exploit-db.com/exploits/45260/ exploit · advisory pihak ketiga · vdb entry
• https://www.exploit-db.com/exploits/45262/ exploit · advisory pihak ketiga · vdb entry
• https://www.exploit-db.com/exploits/45367/ exploit · advisory pihak ketiga · vdb entry
• https://www.oracle.com/security-alerts/cpujul2020.html advisory pihak ketiga
• https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.a... mailing list