CVE-2017-9791 Apache Struts 1
The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
- CVSS
- not scored
On CISA’s exploited list
Apache Struts 1 Improper Input Validation Vulnerability
- Added
- 2022-02-10
- Federal patch deadline
- 2022-08-10
- Ransomware use
- not known