awsl

Struts 2 远程代码执行漏洞(CVE-2024-53677)

  •  
  •   awsl · Feb 11, 2025 · 2423 views
    This topic created in 637 days ago, the information mentioned may be changed or developed.

    Struts 的老项目又遭殃了,我们这边还在 2.3 , 这次修复官方说必须升级到 6.4 以上版本,还不兼容原有代码, 需要自己更新后修改代码逻辑,旧代码就是屎山都不知道谁写的了,大佬们有没有办法救一救/(ㄒoㄒ)/~~

    3 replies  •  2025-02-12 15:01:30 +08:00
    sumarker
    sumarker
    Feb 11, 2025
    1
    If you are not using an old file upload logic based on FileuploadInterceptor your application is safe.
    你的项目是基于 FileuploadInterceptor 的吗?
    cslive
    cslive
    Feb 11, 2025 via Android
    2
    还维护着呢
    eInKLX6Kh6sS3wyc
    eInKLX6Kh6sS3wyc
    Feb 12, 2025
    3
    让我想起了苏州 ry ,我记得也是用的这个老框架。
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Privacy   ·   Solana   ·   2223 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 29ms · UTC 14:22 · PVG 22:22 · LAX 06:22 · JFK 09:22
    ♥ Do have faith in what you're doing.