Apache Struts Remote Code Execution Vulnerability

A vulnerability has been identified in Apache Struts. A remote attacker can exploit this vulnerability to trigger remote code execution and sensitive information disclosure on the targeted system.

[Updated on 2024-12-18]

Updated Impact and Description.

Proof of Concept exploit code Is publicly available for CVE-2024-53677. Attackers are trying to exploit this vulnerability to enumerate vulnerable systems, causing sensitive information disclosure. This can be abused to upload malicious files into restricted directories and can lead to remote code execution (RCE) under certain conditions.