9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
CVE-2024-53677 — How the Exploit Works and How to Run It Vulnerability summary The flaw is in how Struts' FileUploadInterceptor hands off the uploaded filename to the action class. Normally the interceptor sanitizes the filename, but Struts also lets...
Basic Information
ID
4D1D49A1-E69C-5071-8061-96C8DE4B22AC
Published
May 22, 2026 at 07:20
Modified
May 22, 2026 at 08:06