oss-sec mailing list archives
Re: CVE Request: Apache Archiva Remote Command Execution 0day
From: Maksymilian A <max () cert cx>
Date: Wed, 15 Jan 2014 07:23:53 +0100
Thanks. Last Archiva version 1.3.6 (7 January 2014) is unpatched. This is the same vendor for Archiva and Struts. Why is it still not patched? Good question for Apache. Maksymilian Arciemowicz http://cxsecurity.com/ 2014/1/15 security curmudgeon <jericho () attrition org>
: Please assign CVE for Apache Archiva 0day : : http://cxsecurity.com/issue/WLB-2014010087 From that link: Apache Archiva use Apache Struts2: "In Struts 2 before 2.3.15.1 the information following "action:", "redirect:" or "redirectAction:" is not properly sanitized. Since said information will be evaluated as OGNL expression against the value stack, this introduces the possibility to inject server side code." References: http://struts.apache.org/release/2.3.x/docs/s2-016.html ^ All that is CVE-2013-2251.
Current thread:
- CVE Request: Apache Archiva Remote Command Execution 0day Maksymilian A (Jan 14)
- <Possible follow-ups>
- Re: CVE Request: Apache Archiva Remote Command Execution 0day security curmudgeon (Jan 14)
- Re: CVE Request: Apache Archiva Remote Command Execution 0day Maksymilian A (Jan 14)