CVE-2017-5638: Apache Struts Remote Code Execution Vulnerability. Apache

Apache Struts Remote Code Execution Vulnerability. Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.

• CISA KEV-listed (remediation due 2022-05-03)
• used in ransomware campaigns
• EPSS 94.3% (99.9% percentile)

Detection rules

• Potential OGNL Injection Exploitation In JVM Based Application high
• Suspicious Activity in Shell Commands high

Browse the CVE database

Read the full analysis on IntelFusions