secpool2000/cve-2020-17530Apache Struts2框架是一个用于开发Java EE网络应用程序的Web框架。Apache Struts于2020年12月08日披露 S2-061 Struts 远程代码执行漏洞（CVE-2020-17530），在使用某些tag等情况下可能存在OGNL表达式注入漏洞，从而造成远程代码执行，风险极大。提醒我校Apache Struts用户尽快采取安全措施阻止漏洞攻击。
Apache Struts2 is a web framework for developing Java EE web applications. On December 8, 2020, Apache Struts disclosed the S2-061 Struts remote code execution vulnerability (CVE-2020-17530), which may have an OGNL expression injection vulnerability when using certain tags, resulting in remote code execution with extreme risk. We remind Apache Struts users at our university to take security measures as soon as possible to prevent attacks exploiting this vulnerability.
