Lucene search
PRIOn knowledge basePRION:CVE-2023-50164HistoryDec 07, 2023 - 9:15 a.m.
Design/Logic Flaw
2023-12-0709:15:00
PRIOn knowledge base
www.prio-n.com
8
file upload manipulation
paths traversal
malicious file
remote code execution
struts 2.5.33
struts 6.3.0.2
upgrade
nvd
An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.
Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.
Related
cnvd
cnvd
Apache Struts Directory Traversal Vulnerability
2023-12-12 00:00:00
openvas
openvas
Apache Struts Security Update (S2-066)
2023-12-08 00:00:00
f5
f5
K000137931 : Apache Struts vulnerability CVE-2023-50164
2023-12-15 00:00:00
osv
osv
CVE-2023-50164
2023-12-07 09:15:07
Apache Struts vulnerable to path traversal
2023-12-07 09:30:45
cvelist
cvelist
akamaiblog
akamaiblog
nessus
nessus
Cisco Identity Services Engine RCE (cisco-sa-struts-C2kCMkmT)
2023-12-21 00:00:00
malwarebytes
malwarebytes
Recently-patched Apache Struts vulnerability used in worldwide attacks
2023-12-14 21:35:04
Microsoft patches 34 vulnerabilities, including one zero-day
2023-12-13 16:39:23
adobe
adobe
APSB23-77 : Security update available for Adobe Experience Manager Forms
2023-12-15 00:00:00
githubexploit
githubexploit
srcincite
srcincite
ibm
ibm
saint
saint
Apache Struts file upload directory traversal
2023-12-20 00:00:00
Apache Struts file upload directory traversal
2023-12-20 00:00:00
qualysblog
qualysblog
Announcing TotalCloud™ 2.0 with TruRisk™ Insights: The Future of Cloud and SaaS Security
2024-02-07 13:55:00
Yet Another Apache Struts 2 Vulnerability – CVE-2023-50164
2023-12-26 14:06:14
Detect and Manage the Risk of Apache Struts (CVE-2023-50164) Comprehensively
2024-01-12 22:44:26
ubuntucve
ubuntucve
CVE-2023-50164
2023-12-07 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2023-12-14 16:09:57
github
github
Apache Struts vulnerable to path traversal
2023-12-07 09:30:45
cisco
cisco
Apache Struts Vulnerability Affecting Cisco Products: December 2023
2023-12-12 16:00:00
trendmicroblog
trendmicroblog
Decoding CVE-2023-50164: Unveiling the Apache Struts File Upload Exploit
2023-12-15 00:00:00
nvd
nvd
CVE-2023-50164
2023-12-07 09:15:07
redhatcve
redhatcve
CVE-2023-50164
2023-12-11 06:27:16
hivepro
hivepro
Critical Remote Code Execution Flaw Uncovered in Apache Struts 2
2023-12-15 06:56:04
cve
cve
CVE-2023-50164
2023-12-07 09:15:07
thn
thn
New Critical RCE Vulnerability Discovered in Apache Struts 2 - Patch Now
2023-12-12 05:23:00
impervablog
impervablog
CVE-2023-50164: A Critical Vulnerability in Apache Struts
2023-12-19 12:34:31
avleonov
avleonov
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00