exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Steven Seeley

Struts S2-066 File Upload Remote Code Execution

Posted Dec 13, 2023

Authored by Steven Seeley | Site cwiki.apache.org

Apache Struts versions 2.0.0 through 2.3.37 (EOL), 2.5.0 through 2.5.32, and 6.0.0 through 6.3.0 suffer from an issues where an attacker can manipulate file upload parameters to enable a path traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform remote code execution.

tags | advisory, remote, code execution, file upload

advisories | CVE-2023-50164

SHA-256 | 3eabd0d7746d3af616a6a03f2fad7d9609f5c2a795390784bc379146a76826ad

Download | Favorite | View