|    |    |    | Today: 21-Nov-2019 |

Apache Struts 2 REST Plugin XStream Remote Code Execution

November 1, 2017 | Posted in ExploitAlert

Apache Struts versions 2.5 through 2.5.12 using the REST plugin are vulnerable to a Java deserialization attack in the XStream library.


Source: Apache Struts 2 REST Plugin XStream Remote Code Execution

Taged in: Exploit