March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – Magecart Group 5 and Carbanak Stealing Credentials
October 25, 2019
Rewterz Threat Alert – Citadel Banking Malware – IoCs
October 25, 2019
Rewterz Threat Alert – Magecart Group 5 and Carbanak Stealing Credentials
October 25, 2019
Rewterz Threat Alert – Citadel Banking Malware – IoCs
October 25, 2019
Severity
Medium
Analysis Summary
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string. Currently, a Host from Hong Kong is found trying multiple Apache Struts exploits against web servers.
Impact
Remote Code Execution
Affected Vendors
Apache
Affected Products
- Apache Struts 2 2.3.x before 2.3.32
- 2.5.x before 2.5.10.1
Remediation
- Block the threat indicator at its respective control.
- Immediately upgrade to a secure version if vulnerable versions of Apache Struts are currently running in the environment.