Understanding the Impact of the new Apache Struts File Upload Vulnerability

Introduction Recently researcher Steven Seeley discovered a way to abuse the popular Apache Struts frameworks’ file upload functionality to achieve remote code execution. This bug, known as CVE-2023-50164, has been assigned a 9.8 CVSS score. No doubt this is causing some security practitioners to have flashbacks of the “good times” that a serious Struts bug […]

The post Understanding the Impact of the new Apache Struts File Upload Vulnerability appeared first on Praetorian.

abuse apache apache struts bug code code execution cve cvss cvss score file file upload frameworks good impact introduction popular remote code remote code execution researcher score security security practitioners struts understanding upload vulnerability vulnerability research