Description
Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Apache Struts | Apache Software Foundation / Apache Struts | 2.3.x before 2.3.32 | affected |
| Apache Struts | Apache Software Foundation / Apache Struts | 2.5.x before 2.5.10.1 | affected |