CVE-2023-50164
Apache Struts: File upload component had a directory traversal vulnerability
概要
Apache Struts: File upload component had a directory traversal vulnerability
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.
Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- advisory security.netapp.com
- web packetstormsecurity.com
- web repo.maven.apache.org
- web openwall.com