⚠ Exploited in the wild
Exploitation observed in the wild. Not yet on CISA KEV.

CVE-2023-50164

CWE-552 — Files Accessible to External Parties26 documents15 sources
Severity
9.8CRITICAL
EPSS
93.7%
top 0.16%
CISA KEV
Not in KEV
Exploit
Exploited in wild
Active exploitation observed
Affected products
2
Apache StrutsApache Software Foundation Apache Struts
Timeline
PublishedDec 7
Latest updateJan 15

Description

An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages3 packages

▶NVDapache/struts2.0.0 — 2.5.33+1
▶Mavenorg.apache.struts:struts2-core2.0.0 — 2.5.33+1
▶CVEListV5apache_software_foundation/apache_struts2.0.0 — 2.5.32+1

Patches

Patch: lists.apache.org ↗Patch: lists.apache.org ↗

🔴Vulnerability Details

4
CVEList
Apache Struts: File upload component had a directory traversal vulnerability↗2023-12-07
▶
OSV
Apache Struts vulnerable to path traversal↗2023-12-07
▶
GHSA
Apache Struts vulnerable to path traversal↗2023-12-07
▶
VulnCheck
Apache Struts Files or Directories Accessible to External Parties↗2023
▶

🔍Detection Rules

5
Suricata
ET WEB_SPECIFIC_APPS Apache Struts2 uploadFileName Directory Traversal Attempt (CVE-2023-50164) M2↗2023-12-12
▶
Suricata
ET WEB_SPECIFIC_APPS Apache Struts2 uploadFileName Directory Traversal Attempt (CVE-2023-50164) M1↗2023-12-12
▶
Suricata
ET WEB_SPECIFIC_APPS Apache Struts2 Possible uploadFileName Directory Traversal Attempt (CVE-2023-50164) - uploadFileName Parameter M2↗2023-12-12
▶
Suricata
ET WEB_SPECIFIC_APPS Apache Struts2 Possible uploadFileName Directory Traversal Attempt (CVE-2023-50164) - uploadFileName Parameter M1↗2023-12-12
▶
Elastic
Potential Webshell Deployed via Apache Struts CVE-2023-50164 Exploitation↗
▶

📋Vendor Advisories

3
Oracle
Oracle Oracle Communications Risk Matrix: CMP (Apache Struts) — CVE-2023-50164↗2024-01-15
▶
Cisco
Apache Struts Vulnerability Affecting Cisco Products: December 2023↗2023-12-12
▶
Red Hat
Struts: File upload component had a directory traversal vulnerability↗2023-12-07
▶

🕵️Threat Intelligence

11
Qualys
Detect and Manage the Risk of Apache Struts (CVE-2023-50164) Comprehensively | Qualys↗2024-01-12
▶
Qualys
Detect and Manage the Risk of Apache Struts (CVE-2023-50164) Comprehensively↗2024-01-12
▶
Qualys
Yet Another Apache Struts 2 Vulnerability – CVE-2023-50164↗2023-12-26
▶
Qualys
Apache Struts 2 Security Flaw CVE-2023-50164 | Qualys↗2023-12-26
▶
Trendmicro
Decoding CVE-2023-50164: Unveiling the Apache Struts File Upload Exploit↗2023-12-15
▶
CVE-2023-50164 (CRITICAL CVSS 9.8) | An attacker can manipulate file upl | cvebase.io