writeups.xyz / Exploiting Struts RCE on 2.5.26

Submitter : c2a

Date: 12 April 2021

Bounty : undisclosed

Vulnerabilities :

• RCE
• Double OGNL Evaluation

Programs :

• Apache Struts

Authors :

• Chris (@Mc_0wn)

Link :
https://mc0wn.blogspot.com/2021/04/exploiting-struts-rce-on-2526.html