Apache Struts Directory Traversal Vulnerability

Apache Struts is the United States Apache (Apache) Foundation, an open source project , is a set of open source MVC framework for creating enterprise-class Java Web applications , mainly provides two versions of the framework products , Struts 1 and Struts 2. Apache Struts suffers from a directory traversal vulnerability due to a flaw in the Struts framework’s logic for uploading files, which can be exploited by an attacker to execute remote code by constructing a file upload parameter and traversing the file.