THREATOPS
THREAT OPSCVEs › CVE-2020-17530

CVE-2020-17530 — Apache Struts Remote Code Execution Vulnerability

CISA KEVExploited: confirmedApache

Forced Object-Graph Navigation Language (OGNL) evaluation in Apache Struts, when evaluated on raw user input in tag attributes, can lead to remote code execution.

Vulnerability details