Critical severity · published Jan 8, 2012
CVE-2012-0391
The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of…
In wildKEV
9.8
CVSS
75.6%
EPSS
Yes
On KEV
Description
The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)75.6% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Jan 21, 2022
Federal remediation dueJul 21, 2022
Ransomware campaign useNot known
Affected products
Which versions
ST
Struts · Apache
before 2.2.3.1 · source: NVD, KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0391
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0391
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Broken Link
http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html
Vendor Advisory
http://secunia.com/advisories/47393
Vendor Advisory
http://struts.apache.org/2.x/docs/s2-008.html
Vendor Advisory
http://struts.apache.org/2.x/docs/version-notes-2311.html
Exploit
http://www.exploit-db.com/exploits/18329
Vendor Advisory
https://issues.apache.org/jira/browse/WW-3668
More from Struts
9.8
CVE-2020-17530
Apache Struts Remote Code Execution Vulnerability
9.8
CVE-2017-9791
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage
9.8
CVE-2017-5638
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload…
9.8
CVE-2013-2251
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction:…
8.1
CVE-2018-11776
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like…