Apache Struts CVE-2017-5638 OGNL Expression Injection via Content-Type

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•2

Detects incoming HTTP traffic targeting Apache Struts servers, attempting to exploit CVE-2017-5638 by injecting malicious OGNL (Object-Graph Navigation Language) expressions within the 'Content-Type' header.