Exploit for #VU101653 Path traversal in Apache Struts

Vulnerability identifier: #VU101653

Vulnerability risk: High

CVSSv4.0: 8.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber]

CVE-ID: CVE-2024-53677

CWE-ID: CWE-22

Exploitation vector: Network

Exploits in database: 7

• February 25, 2025
  • CVE-2024-53677-Exploit () [Github]
• February 21, 2025
  • CVE-2024-53677 (Vulnerable Environment and Exploit for CVE-2024-53677) [Github]
• January 10, 2025
  • CVE-2024-53677 (File upload logic flaw in Apache Struts2 exploit) [Github]
• December 27, 2024
  • CVE-2024-53677-S2-067-thread [Github]
• December 19, 2024
  • CVE-2024-53677 [Github]
  • CVE-2024-53677-S2-067 (A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute arbitrary code remotely. This vulnerability arises from flaws in the file upload logic, [Github]
  • CVE-2024-53677-Docker [Github]

Vulnerable software:
Apache Struts
Server applications / Frameworks for developing and running applications

Vendor: Apache Foundation