CVE-2017-9791

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-9791
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9791.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-9791
Aliases
Published
2017-07-10T16:29:00.277Z
Modified
2026-04-10T04:02:44.381840Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.

References

Affected packages

Git / github.com/apache/struts

Affected ranges

Type
GIT
Repo
https://github.com/apache/struts
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e5009a34202777b53c5dc36e020d0033aa8be027
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7d7d3fc42b013f0983a16473b10ed24efb988e0e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6246b8e12eb5abee95916b948a7a97e4d736f10b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
183be6b2986755eeac9b86eed9138304a30ff45e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
676a011b4f4d211e167465f3ffb03894c8f60334
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4b5f5619ddeda22f7f358431f604df580f1e61a1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
28297863aee4d747638ce5b6f22262ac6a118ae0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b2fe62824eebd213625d23378b5307dcb1b82c77
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f15f28a1766fe991de85c8cd089b102f77915319
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9df00b0a864fac2e763b7c26ba99af057202f0f3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fc3df96990bafdecc6f3a89cf7a4dcf15066c687
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f0c159d871ee741e0cc74fe858cc7be79841078c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a72c1f4262a57bfe2819c6def81620d02d7867fb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bc6094eece7dfa65e7439cd018d58e85c5d41e47
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8931ac19ea504a167f4d0c8e57ccc8f7f09f4135
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fd206c1386cc113e3f5b52fbc5b2f15a458b31b4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3565f4d4f5c4c85a1ffab9e6169c86527aa6f4c7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
402374de33146e1c0401a247e0779e290cb0c078
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6cddee6fc539429544b28a96361a8af7a0691108
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7dd83dff485d324980f3d22c726cfd969ecf41f8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e03ff728618f5bf551083fc3a52d43c07434bbc9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0320310406f6b11cfd235d7a9b866cf1de483a1e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a9974eec5689a7113a6fb1e2096252f0935064dd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bbbf43ec59e7bef3b07e9065dc9784c18a95d58b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
925741ad1e8e48c7a6d687fe02d3fdb6386eb64c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7a9863169f7d981be0d2d57437974ae2cc0c8bd3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
36b6fff05cd4a17f75b091c0edd52e0c1e65ec06
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0ac8932aa3a1b28a8f950863c17165cdc63b1474
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2cf0a7efeb12c8f476e31324dc56456b340ddeab
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bb22c585b5b52967fab033dba02cd244cd5b5b7a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5c61c9a5752109a00ccdadbce3d4adb681f82c9a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
de90290354a1c6c819687305e053232bc8a4a697
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1ed29d508fc0a3762ad7d16336a71adcf69bd88d
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.14.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.14.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.14.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.15.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.15.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.15.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.16.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.16.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.16.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.20"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.20.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.20.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.24"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.24.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.24.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.28"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.28.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.29"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.30"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.31"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.32"
        }
    ]
}

Affected versions

Other
STRUTS_2_3_1
STRUTS_2_3_12
STRUTS_2_3_14
STRUTS_2_3_14_1
STRUTS_2_3_14_2
STRUTS_2_3_14_3
STRUTS_2_3_15
STRUTS_2_3_15_1
STRUTS_2_3_15_2
STRUTS_2_3_15_3
STRUTS_2_3_16
STRUTS_2_3_16_1
STRUTS_2_3_16_2
STRUTS_2_3_16_3
STRUTS_2_3_1_1
STRUTS_2_3_1_2
STRUTS_2_3_20
STRUTS_2_3_20_1
STRUTS_2_3_20_2
STRUTS_2_3_20_3
STRUTS_2_3_24
STRUTS_2_3_24_1
STRUTS_2_3_24_2
STRUTS_2_3_24_3
STRUTS_2_3_25
STRUTS_2_3_26
STRUTS_2_3_27
STRUTS_2_3_28
STRUTS_2_3_28_1
STRUTS_2_3_29
STRUTS_2_3_3
STRUTS_2_3_30
STRUTS_2_3_31
STRUTS_2_3_32
STRUTS_2_3_4
STRUTS_2_3_4_1
STRUTS_2_3_7
STRUTS_2_3_8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9791.json"