Description

An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.

Remediation

References

https://lists.apache.org/thread/yh09b3fkf6vz5d6jdgrlvmg60lfwtqhj

https://www.openwall.com/lists/oss-security/2023/12/07/1

http://packetstormsecurity.com/files/176157/Struts-S2-066-File-Upload-Remote-Code-Execution.html

https://security.netapp.com/advisory/ntap-20231214-0010/

Related Vulnerabilities

CVE-2022-29823 Vulnerability in npm package feathers-sequelize

CVE-2021-20218 Vulnerability in maven package io.fabric8:kubernetes-client

CVE-2022-24794 Vulnerability in npm package express-openid-connect

CVE-2022-25345 Vulnerability in npm package @discordjs/opus

CVE-2021-32860 Vulnerability in npm package izimodal

Severity

Critical

Classification

CWE-552 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Mailing List Patch Third Party Advisory VDB Entry