virus logo Intrusion Prevention

Apache.Struts.2.DefaultActionMapper.Remote.Command.Execution

description-logoDescription

This indicates an attack attempt to exploit a remote Command Execution vulnerability in Apache Struts 2.
The vulnerability is due to insufficient sanitizing of parameters in the application. A remote attacker may be able to exploit this to execute arbitrary command within the context of the application.

affected-products-logoAffected Products

Struts 2.0.0 - Struts 2.3.15

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Upgrade to the latest version available from the website.
http://struts.apache.org/download.cgi#struts23151

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2020-12-11 16.978 Sig Added

References

http://struts.apache.org/release/2.3.x/docs/s2-016.html
ID 36453
Created Jul 24, 2013
Updated Nov 15, 2021
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
CVE ID CVE-2013-2251
Known Exploited Yes
Exploit Prediction Score 97.38%
Default Action drop
Active
Affected OS All
Affected App Apache