CveMateVulnerability intelligence

CVE-2014-0112: apache struts

CVSS: 7.5v2.0HighModified

AliasesGHSA-prjv-jj26-wf8h

Published 29-04-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-0112 is a high (CVSS 7.5) vulnerability in apache struts. EPSS estimates a 98.06% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk

60/100

0100

High · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

98.06%

0%100%

Critical · +0.14 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits3exploit-database, metasploit

Timeline

29-04-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

98.06%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

+0.14 pp

From 97.91% on 18-09-2026

18-09-202618-10-2026

EPSS score

98.06%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databaseremotemultipleVerified
Apache Struts - ClassLoader Manipulation Remote Code Execution (Metasploit)
Maturity: weaponized
exploit-databaseremotemultipleVerified
Apache Struts < 1.3.10 / < 2.3.16.2 - ClassLoader Manipulation Remote Code Execution (Metasploit)
Maturity: weaponized
MetasploitremoteUnverified
Apache Struts ClassLoader Manipulation Remote Code Execution
exploit/multi/http/struts_code_exec_classloader
Maturity: poc

Weaknesses

CWE · root cause

CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Apache1 product

struts≥ 2.0.0, < 2.3.16.2

Org.apache.struts1 product

struts2-core< 2.3.20

2 vendors · 2 products

References

16 links

packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.htmlX Refsource MISCThird Party AdvisoryVDB EntryWEB
cwiki.apache.org/confluence/display/WW/S2-021X Refsource CONFIRMPatchVendor AdvisoryWEB
secunia.com/advisories/59178Third Party AdvisoryX Refsource SECUNIAPermissions Required
www.vmware.com/security/advisories/VMSA-2014-0007.htmlX Refsource CONFIRMThird Party AdvisoryWEB
www.securityfocus.com/archive/1/531952/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/59500Third Party AdvisoryX Refsource SECUNIAPermissions Required
www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.htmlX Refsource CONFIRMThird Party AdvisoryWEB
www.securityfocus.com/bid/67064VDB EntryX Refsource BIDThird Party Advisory
jvn.jp/en/jp/JVN19294237/index.htmlThird Party AdvisoryX Refsource JVNVDB EntryWEB
jvndb.jvn.jp/jvndb/JVNDB-2014-000045Third Party AdvisoryX Refsource JVNDBVDB EntryWEB

Show all 16 references

www-01.ibm.com/support/docview.wss?uid=swg21676706X Refsource CONFIRMThird Party AdvisoryWEB
bugzilla.redhat.com/show_bug.cgi?id=1091939X Refsource CONFIRMIssue TrackingWEB
www.securityfocus.com/archive/1/532549/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
access.redhat.com/errata/RHSA-2019:0910Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2014-0112Advisory
github.com/apache/strutsPACKAGE