Apache Struts 2 REST Plugin XStream Remote Code Execution
Posted by deepcore on September 8, 2017 – 7:36 am
Apache Struts versions 2.5 through 2.5.12 using the REST plugin are vulnerable to a Java deserialization attack in the XStream library.
Post a reply
You must be logged in to post a comment.