https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:06:28 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08547 bdu:2023-08547 https://cve.radiocsirt.org/vuln/bdu:2023-08547 https://cve.radiocsirt.org/vuln/certfr-2023-ale-013 certfr-2023-ale-013 https://cve.radiocsirt.org/vuln/certfr-2023-ale-013 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1005 certfr-2023-avi-1005 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1005 https://cve.radiocsirt.org/vuln/cisco-sa-struts-c2kcmkmt <p>On December 7, 2023, the following vulnerability in Apache Struts was disclosed: CVE-2023-50164: An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. For a description of this vulnerability, see the Apache Software Foundation Security Bulletin [&#34;https://cwiki.apache.org/confluence/display/WW/S2-066&#34;].</p> <p>On December 7, 2023, the following vulnerability in Apache Struts was disclosed: CVE-2023-50164: An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. For a description of this vulnerability, see the Apache Software Foundation Security Bulletin [&#34;https://cwiki.apache.org/confluence/display/WW/S2-066&#34;].</p> https://cve.radiocsirt.org/vuln/cisco-sa-struts-c2kcmkmt https://cve.radiocsirt.org/vuln/cnvd-2023-97016 cnvd-2023-97016 https://cve.radiocsirt.org/vuln/cnvd-2023-97016 https://cve.radiocsirt.org/vuln/euvd-2026-222712 EUVD-2026-222712 https://cve.radiocsirt.org/vuln/euvd-2026-222712 https://cve.radiocsirt.org/vuln/fkie_cve-2023-50164 <p>An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.</p> <p>An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-50164 https://cve.radiocsirt.org/vuln/ghsa-2j39-qcjm-428w <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.</p> <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-2j39-qcjm-428w https://cve.radiocsirt.org/vuln/gsd-2023-50164 gsd-2023-50164 https://cve.radiocsirt.org/vuln/gsd-2023-50164 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3069 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Struts ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Struts ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3069