CVE-2017-9791
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the...
Basic Information
- CVE State
- PUBLISHED
- Reserved Date
- June 21, 2017
- Published Date
- July 10, 2017
- Last Updated
- February 06, 2025
- Vendor
- Apache Software Foundation
- Product
- Apache Struts
- Description
- The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
CVSS Scores
CVSS v3.1
9.8 - CRITICAL
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
7.5 -
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
SSVC Information
- Exploitation
- active
- Automatable
- Yes
- Technical Impact
- total
References
http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html
http://www.securityfocus.com/bid/99484
https://www.exploit-db.com/exploits/42324/
http://struts.apache.org/docs/s2-048.html
http://www.securitytracker.com/id/1038838
https://www.exploit-db.com/exploits/44643/
https://security.netapp.com/advisory/ntap-20180706-0002/
Known Exploited Vulnerability Information
| Source | Added Date |
|---|---|
| CISA | 2022-02-10 00:00:00 UTC |
Scanner Integrations
| Scanner | URL | Date Detected |
|---|---|---|
| Metasploit | https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/struts2_code_exec_showcase.rb | 2025-04-29 11:01:23 UTC |
| Nuclei | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9791.yaml | 2025-04-26 00:00:00 UTC |
Potential Proof of Concepts
Warning: These PoCs have not been tested and could contain malware. Use at your own risk.
struts2_code_exec_showcase
Type: metasploit • Created: Unknown
Metasploit module for CVE-2017-9791
xfer0/CVE-2017-9791
Type: github • Created: 2017-09-23 19:08:31 UTC • Stars: 0
Metasploit module for Apache Struts CVE-2017-9791 Remote Code Execution Vulnerability