CVE Listesine Dön
CVE-2024-53677Kavram kanıtı (PoC) yayınlanmış · CISA

Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks

CVSS Skor

9.5

EPSS İhtimal

%72.4

Risk Skoru

6.9

Yayın

1 yıl önce

Overview (Genel Bakış)Public Exploits (13)Newsroom (Haberler)Vulnerability Timeline

Public Exploits · GitHub ve Metasploit Intelligence

Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.

G
c4oocO/CVE-2024-53677-Docker
GitHub

A Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. (★2)

Public PoCKaynak güncellemesi: 17.12.2024 19:24:01
G
XiaomingX/CVE-2024-53677-S2-067
GitHub

A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute arbitrary code remotely. This vulnerability arises from flaws in the file upload logic, which can be exploited to perform path traversal and malicious file uploads. (★1)

Public PoCKaynak güncellemesi: 18.12.2024 11:23:31
G
SeanRickerd/CVE-2024-53677
GitHub

Vulnerable Environment and Exploit for CVE-2024-53677 (★1)

Public PoCKaynak güncellemesi: 11.01.2025 03:09:53
G
cloudwafs/s2-067-CVE-2024-53677
GitHub

s2-067(CVE-2024-53677) (★0)

Public PoCKaynak güncellemesi: 12.12.2024 17:33:23
G
TAM-K592/CVE-2024-53677-S2-067
GitHub

A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute arbitrary code remotely. This vulnerability arises from flaws in the file upload logic, which can be exploited to perform path traversal and malicious file uploads. (★0)

Public PoCKaynak güncellemesi: 14.12.2024 03:31:21
G
Q0LT/VM-CVE-2024-53677
GitHub

Struts Vulnerability - CVE-2024-53677 (★0)

Public PoCKaynak güncellemesi: 24.12.2024 02:31:35
G
EQSTLab/CVE-2024-53677
GitHub

Proof-of-Concept for CVE-2024-46538 (★0)

Public PoCKaynak güncellemesi: 03.01.2025 15:20:44
G
hopsypopsy8/CVE-2024-53677-Exploitation
GitHub

Apache Struts CVE-2024-53677 Exploitation (★0)

Public PoCKaynak güncellemesi: 13.02.2025 18:10:56
G
WhoisBulud/CVE-2024-53677
GitHub

CVE-2024-53677 (★0)

Public PoCKaynak güncellemesi: 20.05.2025 17:42:25
G
Cythonic1/CVE-2024-53677-POC
GitHub

a proof of concept of CVE-2024-53677 (★0)

Public PoCKaynak güncellemesi: 02.09.2025 16:30:26
G
seoyoung-kang/CVE-2024-53677
GitHub

CVE-2024-53677 관련 컨설턴트용 툴 개발 (★0)

Public PoCKaynak güncellemesi: 16.10.2025 01:02:47
G
sangrok-jeon/CVE-2024-53677-Analysis
GitHub

CVE-2024-53677 취약점 분석 보고서 (★0)

Public PoCKaynak güncellemesi: 18.03.2026 17:19:04
G
ctfsec/CVE-2024-53677
GitHub

Proof of concept exploit for CVE-2024-53677 - Apache Struts file upload path traversal vulnerability leading to Remote Code Execution (★0)

Public PoCKaynak güncellemesi: 03.05.2026 02:01:04

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-53677"