Struts 2 再曝高危漏洞,请立即升级,这不是演习!
也许对于企业的网络安全人员、IT 运维人员来说,前不久 S2-045 漏洞曝出时,加班修补漏洞的场景还历历在目。然而一波未平一波又起,继 S2-045 漏洞之后,近日又有一个同样是“Critical”高危级别的漏洞被曝出:S2-046 。
也许对于企业的网络安全人员、IT 运维人员来说,前不久 S2-045 漏洞曝出时,加班修补漏洞的场景还历历在目。然而一波未平一波又起,继 S2-045 漏洞之后,近日又有一个同样是“Critical”高危级别的漏洞被曝出:S2-046 。
编辑不禁为IT运维、安全人员们祈祷,他们此时此刻心情可能是崩溃的。
据了解,Struts2 的使用范围及其广泛,国内外均有大量厂商使用该框架。此前曝出的S2-045 已经引起了轩然大波,如今此次漏洞的披露,影响程度相当。
目前网上已经曝出了POC(Proof Of Concept 观点验证程序,可验证该远程执行漏洞)。所以,快去升级,快去升级,快去升级!这不是演习!
附上相关说明及官方应对措施:
官方相关公告:
https://cwiki.apache.org/confluence/display/WW/S2-045
https://cwiki.apache.org/confluence/display/WW/S2-046
补丁地址:
Struts 2.3.32:https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.32
Struts 2.5.10.1:https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.10.1
可参考资料:
http://struts.apache.org/docs/s2-045.html
http://struts.apache.org/docs/s2-046.html
https://community.hpe.com/t5/Security-Research/Struts2-046-A-new-vector/ba-p/6949723#
![](https://cdn.jiler.cn/head.png)
![](https://cdn.jiler.cn/wallpaper/uploads/2024/04/cf379d0c.04.png.webp
)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/03/poor-thing-american-drama-1f2dd5.08.png.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/03/spider-lady-american-drama-99eb1b.01.png.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/kylo-s-apocalypse-daily-anime-american-drama-98b7b1.02.jpeg.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/interest-area-american-drama-da56cf.02.jpeg.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/ninja-shinwei-anime-and-american-drama-727a87.01.jpeg.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/love-contains-light-in-taiwanese-dramas-ddcc03.01.png.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/the-embarrassment-of-killers-in-korean-drama-8a4c63.07.jpeg.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/star-rated-american-dramas-fb5fd1.01.jpeg.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/aguer-mysterious-agent-drama-232a2f.09.jpeg.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/robot-dream-anime-american-drama-20857d.01.png.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/smith-and-his-wife-s-american-drama-14aaa3.10.jpeg.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/seoul-spring-korean-drama-9bb510.02.jpeg.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/gongzhu-korean-drama-1c9c83.02.png.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/hell-inn-anime-american-drama-55c812.03.jpeg.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/a-korean-drama-about-the-killer-s-shopping-center-983202.01.jpeg.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/12th-grade-failed-indian-drama-ab8685.03.png.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/hell-inn-american-drama-animation-ee2b5e.01.jpeg.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/02/wild-korean-drama-e81b11.01.jpeg.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/01/watching-korean-dramas-071c58.01.png.cover.webp?x56643)
![](https://netsmell.com/wordpress/wp-content/uploads/2024/01/hua-qiangu-film-review-of-domestic-drama-a74754.08.jpeg.cover.webp?x56643)
发表回复