Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-gfxq-vtry-bqgg
Aliases:
CVE-2023-50164
GHSA-2j39-qcjm-428w
|
Files or Directories Accessible to External Parties
An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.
Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|