Beveiligingsadvies

CVE-2023-50164

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-12-07 08:49:19
Laatst bijgewerkt 2025-03-14 03:55:16
Toegewezen door apache
CVSS-score geen score
Status PUBLISHED

Beschrijving

An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.