CVE-2017-12611
CriticalPublished
In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to...
- Published
- Sep 20, 2017
- Updated
- Sep 17, 2024
- Assigning CNA
- apache
- Evidence observed
- Sep 8, 2017
Primary CVSS
9.8/ 10Critical
nvd · CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H87.1%
High · next 30 days
- Percentile
- 99.7%
- Model date
- Oct 13, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a RCE attack.
Sources
Repository evidence: Files: 2 · Repositories: 2
1 Template1 Lab
http/cves/2017/CVE-2017-12611.yaml
Nuclei TemplatesDeclared conditions
- network: http($.protocol_keys)
- verification: regex,status($.matchers[*].type)
- Vulhub vulnerability labs
Declared conditions
- lab image version: vulhub/struts2:s2-053(struts2/s2-053/docker-compose.yml:services.struts2.image)
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.