VDB
BDU%3A2023-08547
BDU%3A2023-08547
PUBLISHED
CVSS 10 CRITICAL
Уязвимость программной платформы Apache Struts, связанная с использованием файлов и каталогов, доступных внешним сторонам, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Struts |
Timeline
- Dec 11, 2023 CVE Published
References
- https://www.openwall.com/lists/oss-security/2023/12/07/1 url
- https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-6102825 url
- https://lists.apache.org/thread/yh09b3fkf6vz5d6jdgrlvmg60lfwtqhj advisory
- https://cwiki.apache.org/confluence/display/WW/S2-066 advisory
- https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.3.0.2 advisory
- https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.33 advisory