.. / CVE-2020-17530

• RCE
• Nuclei
• Web

Exploit for Apache Struts 2.0.0-2.5.25 - Remote Code Execution (CVE-2020-17530)

Description:

Apache Struts 2.0.0 through Struts 2.5.25 is susceptible to remote code execution because forced OGNL evaluation, when evaluated on raw user input in tag attributes, may allow it.

Nuclei Template

View the template here CVE-2020-17530.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-17530.yaml

References: