CVE-2023-50164
Apache Struts: File upload component had a directory traversal vulnerability
Summary
Apache Struts: File upload component had a directory traversal vulnerability
Original description
The description as published by the source.
An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.
Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- advisory security.netapp.com
- web packetstormsecurity.com
- web repo.maven.apache.org
- web openwall.com