Tag

struts2-rest-plugin-deserialization

Safeguard articles tagged "struts2-rest-plugin-deserialization" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

Struts2 REST plugin XStream deserialization RCE (CVE-2017-9805)

CVE-2017-9805 lets attackers RCE Struts2 REST APIs via unsafe XStream XML deserialization. Learn impact, affected versions, and remediation steps.

Jan 11, 20267 min read