CVE-2023-50164
Apache Struts: File upload component had a directory traversal vulnerability
Résumé
Apache Struts: File upload component had a directory traversal vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.
Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- advisory security.netapp.com
- web packetstormsecurity.com
- web repo.maven.apache.org
- web openwall.com