ºìÁªLinuxÃÅ»§
Linux°ïÖú

Apache Struts 2.5.14.1·¢²¼£¬MVC¿ò¼Ü

·¢²¼Ê±¼ä:2017-12-02 09:03:40À´Ô´:ºìÁª×÷Õß:baihuo
Apache Struts 2.5.14.1 ÒÑ·¢²¼¡£Struts ÊÇ ApacheÈí¼þ»ù½ð»á£¨ASF£©ÔÞÖúµÄÒ»¸ö¿ªÔ´ÏîÄ¿£¬×î³õÊÇ Jakarta ÏîÄ¿ÖеÄÒ»¸ö×ÓÏîÄ¿£¬ÔÚ 2004Äê3Ô³ÉΪ ASF µÄ¶¥¼¶ÏîÄ¿¡£Ëüͨ¹ý²ÉÓà Java Servlet/JSP ¼¼Êõ£¬ÊµÏÖÁË»ùÓÚ Java EE Web Ó¦ÓÃµÄ MVC Éè¼ÆÄ£Ê½µÄÓ¦Óÿò¼Ü£¬ÊÇ MVC ¾­µäÉè¼ÆÄ£Ê½ÖеÄÒ»¸ö¾­µä²úÆ·¡£

´Ë°æ±¾°üº¬ÒÔÏÂÕë¶ÔDZÔÚ°²È«Â©¶´µÄÐÞ¸´£º

A crafted JSON request can be used to perform a DoS attack when using the Struts REST plugin

Vulnerability in the Jackson JSON library

¸ü¶àÐÞ¸´ºÍ¸Ä½ø£¬Çë²éÔÄ£º

https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.14.1

ÏÂÔØµØÖ·£º

http://struts.apache.org/download.cgi#struts-ga

À´×Ô:¿ªÔ´ÖйúÉçÇø
ÎÄÕÂÆÀÂÛ

¹²ÓÐ 0 ÌõÆÀÂÛ