Apache Struts file upload directory traversal

🗓️ 20 Dec 2023 00:00:00Reported by SAINT CorporationType

saint🔗 my.saintcorporation.com👁 162 Views

Apache Struts directory traversal vulnerability allows remote file upload to arbitrary locations, leading to command execution. Upgrade to Struts 2.5.33 or 6.3.0.2 or higher.

Reporter	Title	Published	Views	Family All 72
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	30 Dec 202321:37	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	15 Dec 202321:19	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	13 Dec 202309:31	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	17 Dec 202314:18	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	4 Sep 202518:35	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	6 Oct 202414:58	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	12 Jan 202409:34	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	20 Dec 202308:39	–	githubexploit
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Apache Struts	5 Mar 202512:01	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Struts	3 Jan 202502:30	–	githubexploit

20 Dec 2023 00:00Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

EPSS0.80819