[Question] Does s2-057.py work without Struts Convention Plugin?
yasserzamani opened this issue · 1 comments
yasserzamani commented
Struts showcase does have almost all plugins included. Does your exploit work on a simple hello-world Struts 2 webapp or a webapp like showcase but without Struts Convention Plugin?
psc4re commented
Conditions are listed here - https://semmle.com/news/apache-struts-CVE-2018-11776