PoC Exploit Apache Struts2 Vulnerability (CVE-2017-9805) Disclaimer: This tutorial/guide for educational purpose only. The vulnerability (CVE-2017-9805) is a programming blunder that resides in the way Struts processes data from an untrusted source. Specifically, Struts REST plugin fails to handle XML payloads while deserializing them properly. All versions of Apache Struts since 2008 (Struts 2.1.2 - Struts 2.3.33, Struts 2.5 - Struts 2.5.12) are affected, leaving all web applications using the framework’s REST plugin vulnerable to remote attackers. More info about this vulnerability: https://errorcybernews.com/2017/09/06/kerentanan-kritis-apache-struts2/ Full version: https://youtu.be/E5MKx9NvRAA #apache #struts #struts2 #apachestruts2 #strutsrestplugin #vulnerabilities #vulnerability #cve20179805
