Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

apache/struts

              main @ 59e3424
            

138

Fixes

CVEs

CRITICAL

Peak severity

25.0%

Coverage

Highlights

Remote Code Execution: 35 prior fixes. Scrutinize any change in this area.

core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java: most-fixed (17 issues). Treat as high-risk during review.

97 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: Attackers repeatedly bypass OGNL sandbox boundaries to achieve arbitrary JVM code execution by abusing static member access, constructor invocation, and proxy class resolution. Historically target of critical RCE CVEs.

Sandbox Escape: Weaknesses in the regular expressions of default excluded patterns allow attackers to bypass standard parameter restrictions, accessing classloaders and dangerous internal variables.

Path Traversal: Improper handling and sanitization of file upload names and parameters lead to write-safety violations and arbitrary file writes outside the intended upload directory.