Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Exploit for Files or Directories Accessible to External Parties in Apache Struts

🗓️ 30 Dec 2023 21:37:08Reported by snyk-labsType 
githubexploit
 githubexploit🔗 github.com👁 416 Views

Proof of Concept for Apache Struts CVE-2023-50164, Demonstrates Path Traversal Vulnerability with Options to Exploit and Remediate

Related
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Apache Struts library affect Tivoli Netcool/OMNIbus WebGUI (CVE-2023-50164)
17 Jan 202402:54
–ibm
IBM Security Bulletins		Security Bulletin: CVE-2023-50164 affects Apache Struts2 used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint
26 Mar 202504:11
–ibm
IBM Security Bulletins		Security Bulletin: IBM Security Guardium is affected by a multiple vulnerabilities (CVE-2023-5072, CVE-2023-50164)
16 Jan 202416:02
–ibm
IBM Security Bulletins		Security Bulletin: Due to use of Apache Struts, Netcool Operation Insight is vulnerable to arbitrary code execution.
3 May 202411:02
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Apache Struts affect IBM Tivoli Application Dependency Discovery Manager.
18 Apr 202412:30
–ibm
IBM Security Bulletins		Security Bulletin: CVE-2023-50164 may affect Apache Struts2 used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint
10 Jan 202405:13
–ibm
IBM Security Bulletins		Security Bulletin: A vulnerability in Apache Struts affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products
1 May 202409:28
–ibm
IBM Security Bulletins		Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
17 Jan 202409:46
–ibm
IBM Security Bulletins		Security Bulletin: Struts Vulnerability - Order Management does contain the Struts code and it is vulnerable with lower risk [CVE-2023-50164]
7 Feb 202422:07
–ibm
GithubExploit		Exploit for Files or Directories Accessible to External Parties in Apache Struts
15 Dec 202321:19
–githubexploit
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
07 Aug 2025 03:51Current
9.9High risk
Vulners AI Score9.9
CVSS 3.19.8
EPSS0.93657
apache strutspath traversalvulnerabilityremote code executionsecurity updateproof of conceptremediationexploitcode fixrelative pathstruts version
416