Back to the CVE list
CVE-2024-53677Proof of concept (PoC) published · CISA

Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks

CVSS score

9.5

EPSS probability

%72.4

Risk score

6.9

Published

1 y ago

OverviewPublic Exploits (13)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
c4oocO/CVE-2024-53677-Docker
GitHub

A Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. (★2)

Public PoCSource updated: 17.12.2024 19:24:01
G
XiaomingX/CVE-2024-53677-S2-067
GitHub

A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute arbitrary code remotely. This vulnerability arises from flaws in the file upload logic, which can be exploited to perform path traversal and malicious file uploads. (★1)

Public PoCSource updated: 18.12.2024 11:23:31
G
SeanRickerd/CVE-2024-53677
GitHub

Vulnerable Environment and Exploit for CVE-2024-53677 (★1)

Public PoCSource updated: 11.01.2025 03:09:53
G
cloudwafs/s2-067-CVE-2024-53677
GitHub

s2-067(CVE-2024-53677) (★0)

Public PoCSource updated: 12.12.2024 17:33:23
G
TAM-K592/CVE-2024-53677-S2-067
GitHub

A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute arbitrary code remotely. This vulnerability arises from flaws in the file upload logic, which can be exploited to perform path traversal and malicious file uploads. (★0)

Public PoCSource updated: 14.12.2024 03:31:21
G
Q0LT/VM-CVE-2024-53677
GitHub

Struts Vulnerability - CVE-2024-53677 (★0)

Public PoCSource updated: 24.12.2024 02:31:35
G
EQSTLab/CVE-2024-53677
GitHub

Proof-of-Concept for CVE-2024-46538 (★0)

Public PoCSource updated: 03.01.2025 15:20:44
G
hopsypopsy8/CVE-2024-53677-Exploitation
GitHub

Apache Struts CVE-2024-53677 Exploitation (★0)

Public PoCSource updated: 13.02.2025 18:10:56
G
WhoisBulud/CVE-2024-53677
GitHub

CVE-2024-53677 (★0)

Public PoCSource updated: 20.05.2025 17:42:25
G
Cythonic1/CVE-2024-53677-POC
GitHub

a proof of concept of CVE-2024-53677 (★0)

Public PoCSource updated: 02.09.2025 16:30:26
G
seoyoung-kang/CVE-2024-53677
GitHub

CVE-2024-53677 관련 컨설턴트용 툴 개발 (★0)

Public PoCSource updated: 16.10.2025 01:02:47
G
sangrok-jeon/CVE-2024-53677-Analysis
GitHub

CVE-2024-53677 취약점 분석 보고서 (★0)

Public PoCSource updated: 18.03.2026 17:19:04
G
ctfsec/CVE-2024-53677
GitHub

Proof of concept exploit for CVE-2024-53677 - Apache Struts file upload path traversal vulnerability leading to Remote Code Execution (★0)

Public PoCSource updated: 03.05.2026 02:01:04

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-53677"