logo

Database

Lack of data validation In com.opensymphony:xwork

Description

Improper Input Validation in OpenSymphony XWork ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a \u0023 representation for the # character.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2008-65042. NVD-2008-65043. OSV-2008-65044. GCVE-2008-6504

References

1. https://exchange.xforce.ibmcloud.com/vulnerabilities/463282. http://fisheye6.atlassian.com/cru/CR-93. http://issues.apache.org/struts/browse/WW-26924. http://jira.opensymphony.com/browse/XW-6415. http://struts.apache.org/2.x/docs/s2-003.html6. http://web.archive.org/web/20081119232431/jira.opensymphony.com/browse/XW-6417. http://web.archive.org/web/20130807023152/https://fisheye6.atlassian.com/cru/CR-98. http://www.securityfocus.com/bid/321019. http://www.vupen.com/english/advisories/2008/300310. http://www.vupen.com/english/advisories/2008/300411. https://www.exploit-db.com/exploits/3256412. http://struts.apache.org/release/2.2.x/docs/s2-003.html13. https://issues.apache.org/jira/browse/WW-269214. http://web.archive.org/web/20111023074138/http://jira.opensymphony.com/browse/XW-64115. https://fisheye6.atlassian.com/cru/CR-9/#CFR-8

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.