152: XML Beware
Sep 10, 2017•9 min
Listen to this episode in Metacast mobile app
Don't just listen to podcasts. Learn from them with transcripts, summaries, and chapters for every episode. Skim, search, and bookmark insights. Learn more
Episode description
A short minisode on Apache Struts, XML deserialisation attacks, and Equifax.
- XML? Be cautious!
- Severe security vulnerability found in Apache Struts using lgtm.com (CVE-2017-9805)
- CVE-2017-9805: Analysis of Apache Struts RCE Vulnerability in REST Plugin
- Apache Struts Statement on Equifax Security Breach
- Apache Struts Security Bulletins
- OWASP Dependency Check
- struts-pwn - an exploit tester
- Remotely Exploitable Java Zero Day Exploits through Deserialization (2015 alert for Apache Commons Collections 3.x)
- A critical Apache Struts security flaw makes it 'easy' to hack Fortune 100 firms
Upgrade your s**t!
For the best experience, listen in Metacast app for iOS or Android