| Name | CVE-2017-12611 |
| Description | In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a RCE attack. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| libstruts1.2-java | source | (unstable) | (unfixed) |
[wheezy] - libstruts1.2-java <ignored> (Minor issue)
Only a problem if the application programmer has made a security mistake.
https://struts.apache.org/docs/s2-053.html