Description
The Apache Struts framework, when forced, performs double evaluation of attributes' values assigned to certain tags attributes such as id. It is therefore possible to pass in a value to Struts that will be evaluated again when a tag's attributes are rendered. With a carefully crafted request, this can lead to Remote Code Execution (RCE).
This vulnerability is application dependant. A server side template must make an affected use of request data to render an HTML tag attribute.
Module options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use exploit/multi/http/struts2/multi_eval_ognlmsf undefined(multi_eval_ognl) > show actions ...actions...msf undefined(multi_eval_ognl) > set ACTION < action-name >msf undefined(multi_eval_ognl) > show options ...show and set options...msf undefined(multi_eval_ognl) > runPrioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub