Apache Struts contains a flaw in the handling of cookie names. The issue is due to the CookieInterceptor class not properly restricting access to certain static methods when handling cookie names. With a specially crafted request, a remote attacker can potentially execute arbitrary commands.
Classification
Location:
Remote / Network Access
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Public
Disclosure:
Vendor Verified,
Coordinated Disclosure
OSVDB:
Web Related
Solution
It has been reported that this issue has been fixed. Upgrade to version 2.3.1.1, or higher, to address this vulnerability.
