Apache Struts Path traversal (S2-067/CVE-2024-53677, S2-066/CVE-2023-50164)
Severity:
Critical
Summary
The file upload mechanism in Apache Struts contains a vulnerability. An attacker can exploit this by manipulating file upload parameters to perform path traversal, potentially allowing the upload of a malicious file. Under certain conditions, this can lead to Remote Code Execution (RCE)
Impact
Under certain conditions, successful attack exploiting the vulnerability can result in takeover of the server.
Remediation
Upgrade at least to Struts 6.4.0 (or the latest version) and migrate to the new file upload mechanism.
Required Skills for Successful Exploitation
Actions To Take
Classifications
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Related Vulnerabilities
Featured resources
Build your resistance to threats. And save hundreds of hours each month.
