漏洞类别:Local
漏洞等级:
漏洞信息
ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request.
漏洞危害
A remote attacker could exploit this vulnerability to execute arbitrary code on the targeted system.
解决方案
There are no vendor supplied patches available at this time.
0day
文章评论