NVD

Id
38233  
Name
CVE-2013-2134  
Description
Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-07-16  
Modified Date
2017-01-06  
Seq
2013-2134  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195489 38233 CVE-2013-2134 GLSA-201409-04  View
195490 38233 CVE-2013-2134 http://struts.apache.org/development/2.x/docs/s2-015.html  View
195491 38233 CVE-2013-2134 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html  View
195492 38233 CVE-2013-2134 http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html  View
195493 38233 CVE-2013-2134 60346  View
195494 38233 CVE-2013-2134 64758  View
195495 38233 CVE-2013-2134 https://cwiki.apache.org/confluence/display/WW/S2-015  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21865 JVNDB-2013-003440 Apache Struts における任意の OGNL コードを実行される脆弱性 Apache Struts には、任意の OGNL コードを実行される脆弱性が存在します。 CVE-2013-2134 62076 CVE-2013-2134 38233 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003440.html 2013-06-03 2014-06-26 View