Apache Struts2 Remote Code Execution Vulnerability (CVE-2023-50164)

What is the Vulnerability?

A remote attacker can manipulate the file upload parameters on the Apache Struts to enable path traversal and upload a malicious file. That can lead to perform remote code execution and complete control of the system. Apache Struts is an open-source and widely adopted framework for developing Java-based web applications.


What is the Vendor Solution?


Users and administrators are encouraged to review the Apache Security Bulletin and upgrade to Struts 2.5.33 or Struts 6.3.0.2 or higher. …

apache apache struts apache struts2 attacker code code execution control cve cve-2023-50164 enable file file upload framework java malicious path path traversal remote code remote code execution struts struts2 system upload vulnerability web what is