https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:40:21 +0000 https://cve.radiocsirt.org/vuln/cve-2024-53677 <p><strong>Affected:</strong> Apache Software Foundation Apache Struts</p> <p>File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.</p> <p>This issue affects Apache Struts: from 2.0.0 before 6.4.0.</p> <p>Users are recommended to upgrade to version 6.4.0 at least and migrate to the new file upload mechanism https://struts.apache.org/core-developers/file-upload . If you are not using an old file upload logic based on FileuploadInterceptor your application is safe.</p> <p>You can find more details in  https://cwiki.apache.org/confluence/display/WW/S2-067</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Struts</p> <p>File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.</p> <p>This issue affects Apache Struts: from 2.0.0 before 6.4.0.</p> <p>Users are recommended to upgrade to version 6.4.0 at least and migrate to the new file upload mechanism https://struts.apache.org/core-developers/file-upload . If you are not using an old file upload logic based on FileuploadInterceptor your application is safe.</p> <p>You can find more details in  https://cwiki.apache.org/confluence/display/WW/S2-067</p> https://cve.radiocsirt.org/vuln/cve-2024-53677