• info
• discussion
• exploit
• solution
• references

Multiple Apache Products CVE-2017-15708 Remote Code Execution Vulnerability

Multiple Apache products are prone to a remote code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition.

The following products are affected:

Apache Commons Collections 3.2.1 and prior
Apache Synapse 3.0.0 and prior