Apache Struts 2.0.0 <=> 2.3.37(EOL) / 2.5.0 <=> 2.5.33 / 6.0.0 <=> 6.3.0.2 のリモートコード実行 (S2-067)

Language:

バージョン 1.5 Jan 21, 2026, 5:00 PM IAVM reference Plugin Feed: 202601211700
バージョン 1.4 Jul 16, 2025, 9:38 AM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202507160938
バージョン 1.3 Dec 20, 2024, 12:27 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202412201227
バージョン 1.2 Dec 17, 2024, 9:25 AM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202412170925
バージョン 1.1 Dec 16, 2024, 8:47 PM New Plugin Feed: 202412162047

* Changelogs are generally available for changes made after Nov 1, 2022