Apache Struts OGNL Injection Attempt

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•4

This rule detects attempts to exploit Apache Struts OGNL (Object-Graph Navigation Language) injection vulnerabilities. It specifically looks for HTTP requests where the 'Content-Type' header contains the sequence '%{', which is characteristic of OGNL expressions used in injection attacks against Apache Struts.