New Critical RCE Vulnerability Discovered in Apache Struts 2 - Patch Now

Apache has released a security advisory warning of a critical security flaw in the Struts 2 open-source web application framework that could result in remote code execution.
Tracked as CVE-2023-50164, the vulnerability is rooted in a flawed "file upload logic" that could enable unauthorized path traversal and could be exploited under the circumstances to upload a malicious file

advisory apache apache struts application code code execution critical cve enable file file upload flaw framework logic patch path path traversal rce remote code remote code execution result security security advisory security flaw struts struts 2 upload vulnerability warning web web application