{"id":1883,"date":"2017-03-16T03:51:57","date_gmt":"2017-03-16T09:51:57","guid":{"rendered":"https:\/\/www.supportpro.com\/blog\/?p=1883"},"modified":"2026-03-26T04:11:18","modified_gmt":"2026-03-26T10:11:18","slug":"cve-2017-5638-apache-struts-2-vulnerability","status":"publish","type":"post","link":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/","title":{"rendered":"CVE-2017-5638: Apache Struts 2 Vulnerability"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Apache Struts 2<\/strong> is an open-source framework widely used for developing Java web applications.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On <strong>March 6, 2017<\/strong>, a critical security vulnerability identified as <strong>CVE-2017-5638<\/strong> was publicly disclosed. This flaw allowed attackers to execute remote code on vulnerable servers by sending specially crafted malicious requests.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability occurs when a server processes file uploads using a <strong>Jakarta-based multipart parser<\/strong>. Attackers can exploit this weakness by embedding malicious commands within the <strong>Content-Type header<\/strong> of a file upload request. When processed by affected versions of Apache Struts 2, the server may execute these commands, leading to unauthorized access or complete system compromise.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The issue specifically affects <strong>Apache Struts 2.3.x versions prior to 2.3.32<\/strong> and <strong>2.5.x versions prior to 2.5.10.1<\/strong>, where improper handling of multipart file uploads enables remote attackers to run arbitrary commands using crafted input strings.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Solution<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Security researchers from both Cisco and Apache strongly recommend upgrading Apache Struts installations to <strong>version 2.3.32<\/strong> or <strong>2.5.10.1 (or later)<\/strong> to eliminate the vulnerability and protect systems from exploitation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you require help, <a href=\"https:\/\/www.supportpro.com\/requestquote.php\">contact SupportPRO Server Admin<\/a><\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><span id=\"hs-cta-wrapper-9d590242-d641-4383-94b4-8cfd62f0af6b\" class=\"hs-cta-wrapper\"><span id=\"hs-cta-9d590242-d641-4383-94b4-8cfd62f0af6b\" class=\"hs-cta-node hs-cta-9d590242-d641-4383-94b4-8cfd62f0af6b\"><a href=\"https:\/\/www.supportpro.com\/requestquote.php\"><\/a><\/span><\/span><\/p>\n\n\n\n<div class=\"wp-block-media-text alignwide has-media-on-the-right is-stacked-on-mobile is-vertically-aligned-center has-white-background-color has-background\"><div class=\"wp-block-media-text__content\">\n<p class=\"has-large-font-size wp-block-paragraph\">Facing issues? <\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Our technical support<br>engineers can solve it. <\/p>\n\n\n\n<!--HubSpot Call-to-Action Code --><span class=\"hs-cta-wrapper\" id=\"hs-cta-wrapper-3350a795-db50-482f-9911-301930d1b1be\"><span class=\"hs-cta-node hs-cta-3350a795-db50-482f-9911-301930d1b1be\" id=\"hs-cta-3350a795-db50-482f-9911-301930d1b1be\"><!--[if lte IE 8]><div id=\"hs-cta-ie-element\"><\/div><![endif]--><a href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/2725694\/3350a795-db50-482f-9911-301930d1b1be\" ><img decoding=\"async\" class=\"hs-cta-img\" id=\"hs-cta-img-3350a795-db50-482f-9911-301930d1b1be\" style=\"border-width:0px;\" src=\"https:\/\/no-cache.hubspot.com\/cta\/default\/2725694\/3350a795-db50-482f-9911-301930d1b1be.png\"  alt=\"Contact Us today!\"\/><\/a><\/span><script charset=\"utf-8\" src=\"https:\/\/js.hscta.net\/cta\/current.js\"><\/script><script type=\"text\/javascript\"> hbspt.cta.load(2725694, '3350a795-db50-482f-9911-301930d1b1be', {\"useNewLoader\":\"true\",\"region\":\"na1\"}); <\/script><\/span><!-- end HubSpot Call-to-Action Code -->\n<\/div><figure class=\"wp-block-media-text__media\"><img fetchpriority=\"high\" decoding=\"async\" width=\"904\" height=\"931\" src=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup.png\" alt=\"guy server checkup\" class=\"wp-image-12943 size-full\" srcset=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup.png 904w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-291x300.png 291w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-768x791.png 768w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-585x602.png 585w\" sizes=\"(max-width: 904px) 100vw, 904px\" \/><\/figure><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Apache Struts 2 is an open-source framework widely used for developing Java web applications. On March 6, 2017, a critical security vulnerability identified as CVE-2017-5638 was publicly disclosed. This flaw&hellip;<\/p>\n","protected":false},"author":5,"featured_media":1906,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"categories":[4,7,3],"tags":[],"class_list":["post-1883","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server-security","category-server-tweaking","category-technical-articles"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"Learn about Apache Struts 2 CVE-2017-5638 vulnerability, how remote code execution works, affected versions, and steps to secure your server.\" \/>\n\t<meta name=\"robots\" content=\"max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n\t<meta name=\"author\" content=\"Bella\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Server Management Tips | SupportPRO Blog\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Apache Struts 2 CVE-2017-5638 Vulnerability &amp; Fix Guide\" \/>\n\t\t<meta property=\"og:description\" content=\"Learn about Apache Struts 2 CVE-2017-5638 vulnerability, how remote code execution works, affected versions, and steps to secure your server.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2017\/03\/Struts-Shock-Blog.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2017\/03\/Struts-Shock-Blog.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"960\" \/>\n\t\t<meta property=\"og:image:height\" content=\"480\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2017-03-16T09:51:57+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-03-26T10:11:18+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Apache Struts 2 CVE-2017-5638 Vulnerability &amp; Fix Guide\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Learn about Apache Struts 2 CVE-2017-5638 vulnerability, how remote code execution works, affected versions, and steps to secure your server.\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2017\/03\/Struts-Shock-Blog.jpg\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2017-5638-apache-struts-2-vulnerability\\\/#article\",\"name\":\"Apache Struts 2 CVE-2017-5638 Vulnerability & Fix Guide\",\"headline\":\"CVE-2017-5638: Apache Struts 2 Vulnerability\",\"author\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/author\\\/jeslin-j\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/03\\\/Struts-Shock-Blog.jpg\",\"width\":960,\"height\":480},\"datePublished\":\"2017-03-16T03:51:57-06:00\",\"dateModified\":\"2026-03-26T04:11:18-06:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2017-5638-apache-struts-2-vulnerability\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2017-5638-apache-struts-2-vulnerability\\\/#webpage\"},\"articleSection\":\"Server Security, Server Tweaking, Technical Articles\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2017-5638-apache-struts-2-vulnerability\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.supportpro.com\\\/blog\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/category\\\/server\\\/#listItem\",\"name\":\"Server\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/category\\\/server\\\/#listItem\",\"position\":2,\"name\":\"Server\",\"item\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/category\\\/server\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/category\\\/server\\\/server-security\\\/#listItem\",\"name\":\"Server Security\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/category\\\/server\\\/server-security\\\/#listItem\",\"position\":3,\"name\":\"Server Security\",\"item\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/category\\\/server\\\/server-security\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2017-5638-apache-struts-2-vulnerability\\\/#listItem\",\"name\":\"CVE-2017-5638: Apache Struts 2 Vulnerability\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/category\\\/server\\\/#listItem\",\"name\":\"Server\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2017-5638-apache-struts-2-vulnerability\\\/#listItem\",\"position\":4,\"name\":\"CVE-2017-5638: Apache Struts 2 Vulnerability\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/category\\\/server\\\/server-security\\\/#listItem\",\"name\":\"Server Security\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/#organization\",\"name\":\"SupportPRO\",\"description\":\"SupportPRO Blog\",\"url\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/\",\"telephone\":\"+18476076123\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/author\\\/jeslin-j\\\/#author\",\"url\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/author\\\/jeslin-j\\\/\",\"name\":\"Bella\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2017-5638-apache-struts-2-vulnerability\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3ec60f871b6d1ea5ee6a2feb8075ecca0c69b8da9dba65a45ba102b7359682ed?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"Bella\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2017-5638-apache-struts-2-vulnerability\\\/#webpage\",\"url\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2017-5638-apache-struts-2-vulnerability\\\/\",\"name\":\"Apache Struts 2 CVE-2017-5638 Vulnerability & Fix Guide\",\"description\":\"Learn about Apache Struts 2 CVE-2017-5638 vulnerability, how remote code execution works, affected versions, and steps to secure your server.\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2017-5638-apache-struts-2-vulnerability\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/author\\\/jeslin-j\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/author\\\/jeslin-j\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/03\\\/Struts-Shock-Blog.jpg\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2017-5638-apache-struts-2-vulnerability\\\/#mainImage\",\"width\":960,\"height\":480},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/cve-2017-5638-apache-struts-2-vulnerability\\\/#mainImage\"},\"datePublished\":\"2017-03-16T03:51:57-06:00\",\"dateModified\":\"2026-03-26T04:11:18-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/\",\"name\":\"Server Management Tips\",\"description\":\"SupportPRO Blog\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.supportpro.com\\\/blog\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>Apache Struts 2 CVE-2017-5638 Vulnerability &amp; Fix Guide<\/title>\n\n","aioseo_head_json":{"title":"Apache Struts 2 CVE-2017-5638 Vulnerability & Fix Guide","description":"Learn about Apache Struts 2 CVE-2017-5638 vulnerability, how remote code execution works, affected versions, and steps to secure your server.","canonical_url":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/","robots":"max-snippet:-1, max-image-preview:large, max-video-preview:-1","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/#article","name":"Apache Struts 2 CVE-2017-5638 Vulnerability & Fix Guide","headline":"CVE-2017-5638: Apache Struts 2 Vulnerability","author":{"@id":"https:\/\/www.supportpro.com\/blog\/author\/jeslin-j\/#author"},"publisher":{"@id":"https:\/\/www.supportpro.com\/blog\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2017\/03\/Struts-Shock-Blog.jpg","width":960,"height":480},"datePublished":"2017-03-16T03:51:57-06:00","dateModified":"2026-03-26T04:11:18-06:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/#webpage"},"isPartOf":{"@id":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/#webpage"},"articleSection":"Server Security, Server Tweaking, Technical Articles"},{"@type":"BreadcrumbList","@id":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog#listItem","position":1,"name":"Home","item":"https:\/\/www.supportpro.com\/blog","nextItem":{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/category\/server\/#listItem","name":"Server"}},{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/category\/server\/#listItem","position":2,"name":"Server","item":"https:\/\/www.supportpro.com\/blog\/category\/server\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/category\/server\/server-security\/#listItem","name":"Server Security"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/category\/server\/server-security\/#listItem","position":3,"name":"Server Security","item":"https:\/\/www.supportpro.com\/blog\/category\/server\/server-security\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/#listItem","name":"CVE-2017-5638: Apache Struts 2 Vulnerability"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/category\/server\/#listItem","name":"Server"}},{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/#listItem","position":4,"name":"CVE-2017-5638: Apache Struts 2 Vulnerability","previousItem":{"@type":"ListItem","@id":"https:\/\/www.supportpro.com\/blog\/category\/server\/server-security\/#listItem","name":"Server Security"}}]},{"@type":"Organization","@id":"https:\/\/www.supportpro.com\/blog\/#organization","name":"SupportPRO","description":"SupportPRO Blog","url":"https:\/\/www.supportpro.com\/blog\/","telephone":"+18476076123"},{"@type":"Person","@id":"https:\/\/www.supportpro.com\/blog\/author\/jeslin-j\/#author","url":"https:\/\/www.supportpro.com\/blog\/author\/jeslin-j\/","name":"Bella","image":{"@type":"ImageObject","@id":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/3ec60f871b6d1ea5ee6a2feb8075ecca0c69b8da9dba65a45ba102b7359682ed?s=96&d=mm&r=g","width":96,"height":96,"caption":"Bella"}},{"@type":"WebPage","@id":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/#webpage","url":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/","name":"Apache Struts 2 CVE-2017-5638 Vulnerability & Fix Guide","description":"Learn about Apache Struts 2 CVE-2017-5638 vulnerability, how remote code execution works, affected versions, and steps to secure your server.","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/www.supportpro.com\/blog\/#website"},"breadcrumb":{"@id":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/#breadcrumblist"},"author":{"@id":"https:\/\/www.supportpro.com\/blog\/author\/jeslin-j\/#author"},"creator":{"@id":"https:\/\/www.supportpro.com\/blog\/author\/jeslin-j\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2017\/03\/Struts-Shock-Blog.jpg","@id":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/#mainImage","width":960,"height":480},"primaryImageOfPage":{"@id":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/#mainImage"},"datePublished":"2017-03-16T03:51:57-06:00","dateModified":"2026-03-26T04:11:18-06:00"},{"@type":"WebSite","@id":"https:\/\/www.supportpro.com\/blog\/#website","url":"https:\/\/www.supportpro.com\/blog\/","name":"Server Management Tips","description":"SupportPRO Blog","inLanguage":"en-US","publisher":{"@id":"https:\/\/www.supportpro.com\/blog\/#organization"}}]},"og:locale":"en_US","og:site_name":"Server Management Tips | SupportPRO Blog","og:type":"article","og:title":"Apache Struts 2 CVE-2017-5638 Vulnerability &amp; Fix Guide","og:description":"Learn about Apache Struts 2 CVE-2017-5638 vulnerability, how remote code execution works, affected versions, and steps to secure your server.","og:url":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/","og:image":"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2017\/03\/Struts-Shock-Blog.jpg","og:image:secure_url":"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2017\/03\/Struts-Shock-Blog.jpg","og:image:width":960,"og:image:height":480,"article:published_time":"2017-03-16T09:51:57+00:00","article:modified_time":"2026-03-26T10:11:18+00:00","twitter:card":"summary","twitter:title":"Apache Struts 2 CVE-2017-5638 Vulnerability &amp; Fix Guide","twitter:description":"Learn about Apache Struts 2 CVE-2017-5638 vulnerability, how remote code execution works, affected versions, and steps to secure your server.","twitter:image":"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2017\/03\/Struts-Shock-Blog.jpg"},"aioseo_meta_data":{"post_id":"1883","title":"Apache Struts 2 CVE-2017-5638 Vulnerability &amp; Fix Guide","description":"Learn about Apache Struts 2 CVE-2017-5638 vulnerability, how remote code execution works, affected versions, and steps to secure your server.","keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-03-26 11:06:50","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":null,"ai":{"faqs":[],"keyPoints":[],"titles":[],"descriptions":[],"socialPosts":{"email":[],"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2021-12-10 16:11:21","updated":"2026-07-01 00:47:42"},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.supportpro.com\/blog\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.supportpro.com\/blog\/category\/server\/\" title=\"Server\">Server<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.supportpro.com\/blog\/category\/server\/server-security\/\" title=\"Server Security\">Server Security<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\tCVE-2017-5638: Apache Struts 2 Vulnerability\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.supportpro.com\/blog"},{"label":"Server","link":"https:\/\/www.supportpro.com\/blog\/category\/server\/"},{"label":"Server Security","link":"https:\/\/www.supportpro.com\/blog\/category\/server\/server-security\/"},{"label":"CVE-2017-5638: Apache Struts 2 Vulnerability","link":"https:\/\/www.supportpro.com\/blog\/cve-2017-5638-apache-struts-2-vulnerability\/"}],"_links":{"self":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/1883","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/comments?post=1883"}],"version-history":[{"count":9,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/1883\/revisions"}],"predecessor-version":[{"id":16646,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/1883\/revisions\/16646"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/media\/1906"}],"wp:attachment":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/media?parent=1883"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/categories?post=1883"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/tags?post=1883"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}