CVE-2023-50164

Summary

CVE-2023-50164 is a newly identified vulnerability in Apache Struts that allows an attacker to manipulate file upload parameters. By exploiting this issue, an adversary can perform paths traversal and potentially upload malicious files. In some cases, this can lead to Remote Code Execution. To mitigate this risk, users are advised to upgrade to the latest versions of Struts 2.5.33 or Struts 6.3.0.2 or higher.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.