EternalSec·Sep 18Apache Struts 2 REST Plugin XStream Deserialization: When XML Requests Become Remote Code ExecutionA trusted XML request should never be able to decide which Java objects your server creates.
The Skillpods·Jun 15Apache Struts2: The HTTP Header That Breached EquifaxHow one malformed Content-Type header turned a web framework into a remote shell — and exposed 147 million people.
InInfoSec Write-upsbyMrXcrypt·Jan 27, 2025Strutted Walkthrough — HackTheBoxStrutted — a Medium Linux Machine teaches Apache Struts 2 CVE and then misconfigured sudo permission.
Hayden Baillio·Jan 14, 2025Your Company Will Get Hacked Because You’re Too Busy Playing Corporate Politics to Care About…Let’s cut the BS: Your security team found this Apache vulnerability weeks ago. They probably sent you an urgent Slack message about it…
Hayden Baillio·Dec 23, 2024CVE-2024–53677 in Apache Struts: Enough With the FOMO, Patching Is PossibleWhy you don’t actually have to toss out your entire legacy Struts app to stay safe.
