Description
攻击者可以操纵文件上传参数，从而启用路径遍历，在某些情况下，这可能导致上传恶意文件，进而可以用于执行远程代码执行攻击（不使用 FileUploadInterceptor 的应用程序是安全的）。
Apache Struts 安全漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://struts.apache.org/security/
https://nvd.nist.gov/vuln/detail/CVE-2024-53677
https://cwiki.apache.org/confluence/display/WW/S2-067
https://www.secrss.com/articles/86949
https://zhuanlan.zhihu.com/p/15721986818
https://baike.baidu.com/item/struts2%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9E/8277162
https://blog.qualys.com/vulnerabilities-threat-research/2024/12/16/critical-apache-struts-file-upload-vulnerability-cve-2024-53677-risks-implications-and-enterprise-countermeasures
https://www.cnblogs.com/mt0u/p/16138615.html