OGNL provides, among other features, extensive expression evaluation capabilities. This vulnerability allows a malicious user to bypass the '#'-usage protection built into the ParametersInterceptor, thus being able to manipulate server side context objects. This behavior was already addressed in S2-003, but it turned out that the resulting fix based on whitelisting acceptable parameter names closed the vulnerability only partially.
| Score | Percentile |
|---|---|
| 92.53% | 99.73% |
No CVSS scores in this advisory.
| Type | Value |
|---|---|
| GHSA | GHSA-x5fc-pgpx-59j5 ↗ |
| CVE | CVE-2010-1870 ↗ |
Vulnerable version ranges and first patched releases as published by GitHub.
| Ecosystem | Package | Vulnerable range | First patched | Vulnerable functions |
|---|---|---|---|---|
| maven | org.apache.struts:struts2-core | < 2.2.1 | 2.2.1 | — |