writeups.xyz / Apache Struts double evaluation RCE lottery

Submitter : c2a

Date: 4 October 2018

Bounty : undisclosed

Vulnerabilities :

• RCE
• Double OGNL Evaluation

Programs :

• Apache Struts

Authors :

• Man Yue Mo (@Mmolgtm)

Link :
https://securitylab.github.com/research/apache-struts-double-evaluation/