Apache Struts Remote Code Execution Vulnerability in Struts 1 Plugin

A remote code execution vulnerability has been identified in Apache Struts versions 2.1.x and 2.3.x, specifically within the Struts 1 plugin. This vulnerability arises when a malicious field value is sent in a raw message to the ActionMessage, allowing for unauthorized execution of code.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where the vulnerable Struts application is running.

Reproduction

To reproduce this vulnerability, upload a malicious payload using the 'name' parameter in the 'description' field of a form. The payload should be crafted to exploit the OGNL (Object-Graph Navigation Language) expression evaluation, taking advantage of the Struts 1 plugin's improper input validation. Once the payload is delivered, the server will execute the embedded commands, leading to remote code execution.

Remediation

Users are advised to update to Apache Struts versions 2.5.12 or 2.3.33 and later, where this vulnerability has been patched.