Sploitus

CVE-2020-17530

12 known exploits for CVE-2020-17530

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.

Affected products
Apache Struts
Apache Struts
< 2.5.30
CVSS 3.1
9.8 CRITICAL
EPSS
95.6% (100th percentile)
Weakness
CWE-917
NVD status
Analyzed
Published
2020-12-11
CVE-2020-17530 at NVD
Authoritative description, scoring and affected products

12 known exploits for CVE-2020-17530

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-Apache-Ecosystem
2026-08-13 chengbochuan3GITHUB
Exploit for Expression Language Injection in Apache Struts
2022-07-10 z92gGITHUB
Apache Struts forced OGNL evaluation incomplete fix
2022-04-26 SAINT CorporationSAINT
Apache Struts forced OGNL evaluation incomplete fix
2022-04-26 SAINT CorporationSAINT
Exploit for Expression Language Injection in Apache Struts
2022-04-15 Wrin9GITHUB
Exploit for Expression Language Injection in Apache Struts
2021-01-24 NULLGITEE
Exploit for Expression Language Injection in Apache Struts
2021-01-24 killmondayGITHUB
Exploit for Expression Language Injection in Apache Struts
2020-12-30 CyborgSecurityGITHUB
Apache Struts 2 Forced Multi OGNL Evaluation Exploit
2020-12-24 metasploitZDTRuby
Apache Struts 2 Forced Multi OGNL Evaluation
2020-12-24 Matthias KaiserPACKETSTORMRuby
Exploit for Expression Language Injection in Apache Struts
2020-12-10 wuzuoweiGITHUB
Apache Struts 2 Forced Multi OGNL Evaluation
2020-09-14 Spencer McIntyre, Matthias Kaiser, Alvaro Muñoz, ka1n4tMETASPLOITRuby