Please turn on your JavaScript for this page to function normally. The Apache Struts project has released updates for the popular open-source web application framework, with fixes for a critical vulnerability that could lead to remote code execution (CVE-2023-50164). About CVE-2023-50164 CVE-2023-50164 may allow an attacker to manipulate file upload parameters to enable path traversal. Under some
![New RCE vulnerability in Apache Struts 2 fixed, upgrade ASAP (CVE-2023-50164) - Help Net Security](https://cdn-ak-scissors.b.st-hatena.com/image/square/2e10109845fda70b9e783019331ee5fdc22ec9de/height=288;version=1;width=512/https%3A%2F%2Fimg.helpnetsecurity.com%2Fwp-content%2Fuploads%2F2017%2F03%2F09104837%2Fapache-struts.jpg)