NVD

Id
38234  
Name
CVE-2013-2135  
Description
Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted value that contains both "${}" and "%{}" sequences, which causes the OGNL code to be evaluated twice.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-07-16  
Modified Date
2014-05-05  
Seq
2013-2135  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195496 38234 CVE-2013-2135 http://struts.apache.org/development/2.x/docs/s2-015.html  View
195497 38234 CVE-2013-2135 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html  View
195498 38234 CVE-2013-2135 http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html  View
195499 38234 CVE-2013-2135 64758  View
195500 38234 CVE-2013-2135 https://cwiki.apache.org/confluence/display/WW/S2-015  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21866 JVNDB-2013-003441 Apache Struts における任意の OGNL コードを実行される脆弱性 Apache Struts には、任意の OGNL コードを実行される脆弱性が存在します。 CVE-2013-2135 62077 CVE-2013-2135 38234 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003441.html 2013-06-03 2014-06-26 View