Exposures › CVE-2020-17530

CVE-2020-17530

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2021-11-03

Reference

https://nvd.nist.gov/vuln/detail/CVE-2020-17530

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Forced Object-Graph Navigation Language (OGNL) evaluation in Apache Struts, when evaluated on raw user input in tag attributes, can lead to remote code execution.

Players implicated

apache · vendor Struts · product

Description

Forced Object-Graph Navigation Language (OGNL) evaluation in Apache Struts, when evaluated on raw user input in tag attributes, can lead to remote code execution.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.