CVE

CVE-2017-9791

Apache Struts 1 Improper Input Validation Vulnerability

Apache · Struts 1

Date added (CISA)

2022-02-10

Remediation due

2022-08-10

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.