
Apache Struts2框架是一个用于开发Java EE网络应用程序的Web框架。Apache Struts于2020年12月08日披露 S2-061 Struts 远程代码执行漏洞(CVE-2020-17530),在使用某些tag等情况下可能存在OGNL表达式注入漏洞,从而造成远程代码执行,风险极大。提醒我校Apache Struts用户尽快采取安全措施阻止漏洞攻击。
Apache Struts2 framework is a web framework for developing Java EE web applications. Apache Struts disclosed S2-061 Struts remote code execution vulnerability (CVE-2020-17530) on December 08, 2020. When using certain tags and other cases, there may be an OGNL expression injection vulnerability, resulting in remote code execution, which is extremely risky. Remind our school's Apache Struts users to take security measures as soon as possible to prevent vulnerability attacks.