Skip to content
OpenAdvisories

Archive

7 December 2023

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-50164 Public exploit EPSS 81%

    Apache Struts: File upload component had a directory traversal vulnerability

    An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or …