Skip to main content
smallavarapu
Staff
smallavarapu
Staff
Jan 6, 2025 10:47 AM UTC

Outbreak alert: Apache Struts 2 RCE Attack

Description

This article describes the detection of the Apache Struts 2 RCE Attack (CVE-2024-53677 , CVE-2023-50164).


Apache Struts 2 RCE Attack (CVE-2024-53677, CVE-2023-50164) allows attackers to manipulate file upload parameters to enable path traversal, potentially leading to malicious file upload. This may result in Remote Code Execution, allowing attackers to run arbitrary code, steal data, or compromise entire systems.
Scope FortiDevSec SCA scanner updated in version 24.4.
Solution

Detection against these vulnerabilities is empowered by the FortiDevSec Software Composition Analysis (SCA) scanner.

 

This technology enables FortiDevSec to assess with a high level of confidence, if the application codebase is vulnerable to a specific vulnerability by identifying open-source software dependencies.

 

The SCA scanner is enabled by default. Once the scan is performed on an application, the result appears under the Software Composition Analysis tab.

 

A step-by-step guide on how to scan an application is available in the user-guide.

 

For more details regarding mitigating the vulnerability by utilizing Fortinet products, refer to Outbreak Alert.
Terms & ConditionsAccessibility statement
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT