Dec. 14, 2023, 11:10 p.m. |

GovInfoSecurity.com RSS Syndication www.govinfosecurity.com

Bug Enables Path Traversal Attack
Hackers are using publicly disclosed proof-of-concept code to exploit a recently patched critical vulnerability found in the Apache Struts 2 Framework to achieve remote code execution. The Apache Foundation, which manages the Struts library, on Dec. 7 urged developers to apply a patch.

apache apache struts bug code code execution concept critical critical vulnerability dec developers exploit exploiting flaw found foundation framework hackers library patch path path traversal proof proof-of-concept remote code remote code execution struts struts 2 vulnerability

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Corporate Intern - Information Security (Year Round)

@ Associated Bank | US WI Remote

Senior Offensive Security Engineer

@ CoStar Group | US-DC Washington, DC