UNKNOWNKNOWN EXPLOITED
CVE-2017-9791
Apache Struts 1 Improper Input Validation Vulnerability
Summary
The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
References
Includes data from the CISA Known Exploited Vulnerabilities catalog.
CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.