583da3d5df5aeeded3beadca6305a98c5618e46b | Vulnerability History Project

The Vulnerability History Project

WW-4805 Blocks ognl access to class members of Spring proxy

by Maude the Cheetah 2017-06-21 12:10:29 UTC

commit 583da3d5df5aeeded3beadca6305a98c5618e46b

Struts Fix Spring proxy DoS CVE-2017-9787

xwork-core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java

-6

xwork-core/src/main/java/com/opensymphony/xwork2/util/ProxyUtil.java

-151

xwork-core/src/test/java/com/opensymphony/xwork2/spring/ActionsFromSpringTest.java

-26

xwork-core/src/test/resources/com/opensymphony/xwork2/spring/actionContext-xwork.xml

-10

expand_less