https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:14:02 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-11084 bdu:2024-11084 https://cve.radiocsirt.org/vuln/bdu:2024-11084 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1066 certfr-2024-avi-1066 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1066 https://cve.radiocsirt.org/vuln/cnvd-2024-47916 cnvd-2024-47916 https://cve.radiocsirt.org/vuln/cnvd-2024-47916 https://cve.radiocsirt.org/vuln/euvd-2026-208885 EUVD-2026-208885 https://cve.radiocsirt.org/vuln/euvd-2026-208885 https://cve.radiocsirt.org/vuln/fkie_cve-2024-53677 <p>File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.</p> <p>This issue affects Apache Struts: from 2.0.0 before 6.4.0.</p> <p>Users are recommended to upgrade to version 6.4.0 at least and migrate to the new file upload mechanism https://struts.apache.org/core-developers/file-upload . If you are not using an old file upload logic based on FileuploadInterceptor your application is safe.</p> <p>You can find more details in  https://cwiki.apache.org/confluence/display/WW/S2-067</p> <p>File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.</p> <p>This issue affects Apache Struts: from 2.0.0 before 6.4.0.</p> <p>Users are recommended to upgrade to version 6.4.0 at least and migrate to the new file upload mechanism https://struts.apache.org/core-developers/file-upload . If you are not using an old file upload logic based on FileuploadInterceptor your application is safe.</p> <p>You can find more details in  https://cwiki.apache.org/confluence/display/WW/S2-067</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-53677 https://cve.radiocsirt.org/vuln/ghsa-43mq-6xmg-29vm <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>File upload logic is flawed vulnerability in Apache Struts. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.</p> <p>This issue affects Apache Struts: from 2.0.0 before 6.4.0.</p> <p>Users are recommended to upgrade to version 6.4.0 at least and migrate to the new file upload mechanism https://struts.apache.org/core-developers/file-upload. If you are not using an old file upload logic based on FileuploadInterceptor your application is safe.</p> <p>You can find more details in  https://cwiki.apache.org/confluence/display/WW/S2-067 .</p> <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-core</p> <p>File upload logic is flawed vulnerability in Apache Struts. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.</p> <p>This issue affects Apache Struts: from 2.0.0 before 6.4.0.</p> <p>Users are recommended to upgrade to version 6.4.0 at least and migrate to the new file upload mechanism https://struts.apache.org/core-developers/file-upload. If you are not using an old file upload logic based on FileuploadInterceptor your application is safe.</p> <p>You can find more details in  https://cwiki.apache.org/confluence/display/WW/S2-067 .</p> https://cve.radiocsirt.org/vuln/ghsa-43mq-6xmg-29vm https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3660 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Struts ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Struts ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3660