## https://sploitus.com/exploit?id=F8DA3669-2610-5D18-85D1-F861722D168C
PoC exploit for CVE-2020-17530, a deserialization vulnerability in Apache Struts 2.0.0 to 2.5.25. The target product/service is Apache Struts, specifically the struts2_showcase_war application. The vulnerability class/vector is deserialization, allowing for remote code execution. The probable entry point is the s2-061.py script, which sends a POST request to the /hello.action endpoint with a specially crafted payload. Not specified how it is typically invoked. Preconditions are a vulnerable version of Apache Struts (2.0.0 to 2.5.25) and likely a specific configuration. Expected impact is remote code execution. Observable network artifacts include a POST request to the /hello.action endpoint with a large payload.