CVE coverage
View on NVD →
CVE-2013-2135
CVSS 9.3
4 detections found
Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted value that contains both "${}" and "%{}" sequences, which causes the OGNL code to be evaluated twice.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET WEB_SERVER Possible Apache Struts OGNL Expression Injection | rev 4 | 2024-03-07 |
| suricata | ET WEB_SERVER Possible Apache Struts OGNL in Dynamic Action | rev 6 | 2020-09-19 |
| snort | ET WEB_SERVER Possible Apache Struts OGNL Expression Injection | rev 1 | 2016-11-18 |
| snort | ET WEB_SERVER Possible Apache Struts OGNL in Dynamic Action | rev 3 | 2013-08-07 |