Apache S2-032 Struts RCE

Apache Struts 2 is a sophisticated, extensible platform for developing enterprise-grade Java web applications. There is a remote code execution vulnerability in Apache Struts S2-032. This vulnerability exists when Dynamic Method Invocation (DMI) is enabled. Because expressions passed to the server side are not adequately validated using the method: prefix.

Mitigation / Precaution

• If Direct Method Invocation (DMI) is enabled, disable it.

• Update your Apache Struts Server, to the latest version to eliminate this vulnerability.

Written by

Nash N Sulthan

Cyber Security Lead Engineer

Nash is a seasoned Security Engineer who brings a multifaceted approach to safeguarding digital environments. Not only does he excel in implementing robust security measures, but he's also deeply involved in the research and development process, constantly innovating to stay ahead of cyber threats. Nash's commitment to security extends beyond the conventional, making him a valuable contributor to the evolving landscape of digital defense.