What is apache struts cve 2017 5638?



What is apache struts cve 2017 5638?..

Answer / Vipra Choudhary

CVE-2017-5638, also known as 'Struts Equation Type Command Injection', is a critical vulnerability in the Apache Struts framework that allows attackers to execute arbitrary code on a server running a vulnerable version of Struts by injecting malicious content into certain request parameters.

Is This Answer Correct ?    0 Yes 0 No

Post New Answer

More Struts Interview Questions

What is the purpose of @validations annotation?

1 Answers  


what is BUSINESS DELIGATE PATTERN,DAO,VO,DTO?

6 Answers   BOB Technologies, TCS,


How can you create your custom interceptor in struts 2?

1 Answers  


Can you explain value stack?

1 Answers  


How you will make available any message resources definitions file to the struts framework environment?

1 Answers  


What are the ways in which duplicate form submission can occur?

1 Answers  


How properties of a form are validated in Struts?

1 Answers  


i have list of values(e.g 100). using logic:iterate, how can i print the multiples of 5th element? how the logic:iterate will understand the multiples of 5.

2 Answers   CTS, TCS,


How does struts2 token work?

1 Answers  


What is the use of token interceptor in Struts2?

1 Answers  


why do we typecast ActionForm into out plain java bean class in Action class?

5 Answers  


Describe validate() and reset() methods.

1 Answers  


Categories