Apache Struts vulnerable to path traversal

🗓️ 07 Dec 2023 09:30:45Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 62 Views

Apache Struts path traversal vulnerability, update to Struts 2.5.33 or 6.3.0.2

Reporter	Title	Published	Views	Family All 70
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	30 Dec 202321:37	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	15 Dec 202321:19	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	13 Dec 202309:31	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	17 Dec 202314:18	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	4 Sep 202518:35	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	6 Oct 202414:58	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	12 Jan 202409:34	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	20 Dec 202308:39	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	5 Mar 202512:01	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Struts	3 Jan 202502:30	–	githubexploit

Vulners

Node

org.apache.struts struts2-coreRange2.0.0–2.5.33maven

OR

org.apache.struts struts2-coreRange6.0.0–6.3.0.2maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-50164
lists	www.lists.apache.org/thread/yh09b3fkf6vz5d6jdgrlvmg60lfwtqhj
openwall	www.openwall.com/lists/oss-security/2023/12/07/1
github	www.github.com/apache/struts/commit/162e29fee9136f4bfd9b2376da2cbf590f9ea163
github	www.github.com/apache/struts/commit/d8c69691ef1d15e76a5f4fcf33039316da2340b6
openwall	www.openwall.com/lists/oss-security/2023/12/07/1
packetstormsecurity	www.packetstormsecurity.com/files/176157/Struts-S2-066-File-Upload-Remote-Code-Execution.html
cwiki	www.cwiki.apache.org/confluence/display/WW/S2-066
security	www.security.netapp.com/advisory/ntap-20231214-0010
github	www.github.com/advisories/GHSA-2j39-qcjm-428w

13 Feb 2025 19:28Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

EPSS0.93657

apache struts path traversal file upload remote code execution security update