CVE-2023-50164
Apache Struts File Traversal Remote Code Execution Vulnerability
Description
An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.
INFO
Published Date :
Dec. 7, 2023, 9:15 a.m.
Last Modified :
Dec. 20, 2023, 5:58 p.m.
Source :
[email protected]
Remotely Exploitable :
Yes !
Impact Score :
5.9
Exploitability Score :
3.9
Public PoC/Exploit Available at Github
CVE-2023-50164 has a 29 public PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2023-50164.
| URL | Resource |
|---|---|
| http://packetstormsecurity.com/files/176157/Struts-S2-066-File-Upload-Remote-Code-Execution.html | Third Party Advisory VDB Entry |
| https://lists.apache.org/thread/yh09b3fkf6vz5d6jdgrlvmg60lfwtqhj | Mailing List Patch |
| https://security.netapp.com/advisory/ntap-20231214-0010/ | Third Party Advisory VDB Entry |
| https://www.openwall.com/lists/oss-security/2023/12/07/1 | Mailing List |
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
CVE-2023-50164 PoC Application & Exploit script
Dockerfile Java Python
None
None
HTML
None
Java HTML
None
HTML
None
None
None
HTML Python
CVE-2023-50164 An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.
apache dockerfile exploit vulnerability webapplications
Python Java HTML
None
None
None
CSS HTML JavaScript
收集POC
CVE-2023-50164 (Apache Struts path traversal to RCE vulnerability) - Proof of Concept
Dockerfile Shell Java HTML
None
Java HTML
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2023-50164 vulnerability anywhere in the article.
-
Trend Micro
CVE-2024-38112: Void Banshee Targets Windows Users Through Zombie Internet Explorer in Zero-Day Attacks
Exploits & Vulnerabilities Our threat hunters discovered CVE-2024-38112, which was used as a zero-day by APT group Void Banshee, to access and execute files through the disabled Internet Explorer usin ... Read more
-
The Cloudflare Blog
Application Security report: 2024 update
2024-07-1111 min readThis post is also available in 简体中文, 繁體中文, 日本語, 한국어, Deutsch, Español and Français. Over the last twelve months, the Internet security landscape has changed dramatically. Geopolit ... Read more
The following table lists the changes that have been made to the
CVE-2023-50164 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by [email protected]
May. 14, 2024
Action Type Old Value New Value -
Modified Analysis by [email protected]
Dec. 20, 2023
Action Type Old Value New Value Changed Reference Type http://packetstormsecurity.com/files/176157/Struts-S2-066-File-Upload-Remote-Code-Execution.html No Types Assigned http://packetstormsecurity.com/files/176157/Struts-S2-066-File-Upload-Remote-Code-Execution.html Third Party Advisory, VDB Entry Changed Reference Type https://security.netapp.com/advisory/ntap-20231214-0010/ No Types Assigned https://security.netapp.com/advisory/ntap-20231214-0010/ Third Party Advisory, VDB Entry -
CVE Modified by [email protected]
Dec. 14, 2023
Action Type Old Value New Value Added Reference Apache Software Foundation https://security.netapp.com/advisory/ntap-20231214-0010/ [No types assigned] -
CVE Modified by [email protected]
Dec. 13, 2023
Action Type Old Value New Value Added Reference Apache Software Foundation http://packetstormsecurity.com/files/176157/Struts-S2-066-File-Upload-Remote-Code-Execution.html [No types assigned] -
Initial Analysis by [email protected]
Dec. 12, 2023
Action Type Old Value New Value Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Changed Reference Type https://lists.apache.org/thread/yh09b3fkf6vz5d6jdgrlvmg60lfwtqhj No Types Assigned https://lists.apache.org/thread/yh09b3fkf6vz5d6jdgrlvmg60lfwtqhj Mailing List, Patch Changed Reference Type https://www.openwall.com/lists/oss-security/2023/12/07/1 No Types Assigned https://www.openwall.com/lists/oss-security/2023/12/07/1 Mailing List Added CPE Configuration OR *cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:* versions from (including) 2.0.0 up to (excluding) 2.5.33 *cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:* versions from (including) 6.0.0 up to (excluding) 6.3.0.2 -
CVE Modified by [email protected]
Dec. 07, 2023
Action Type Old Value New Value Changed Description An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.1 or greater to fix this issue. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue. Added Reference Apache Software Foundation https://www.openwall.com/lists/oss-security/2023/12/07/1 [No types assigned] Removed Reference Apache Software Foundation http://www.openwall.com/lists/oss-security/2023/12/07/1 -
CVE Modified by [email protected]
Dec. 07, 2023
Action Type Old Value New Value Added Reference Apache Software Foundation http://www.openwall.com/lists/oss-security/2023/12/07/1 [No types assigned] -
CVE Received by [email protected]
Dec. 07, 2023
Action Type Old Value New Value Added Description An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.1 or greater to fix this issue. Added Reference Apache Software Foundation https://lists.apache.org/thread/yh09b3fkf6vz5d6jdgrlvmg60lfwtqhj [No types assigned] Added CWE Apache Software Foundation CWE-552
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2023-50164 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2023-50164
weaknesses.
Exploit Prediction
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.
13.12 }} 0.19%
score
0.95664
percentile