""ET WEB_SPECIFIC_APPS Apache Struts2 uploadFileName Directory Traversal Attempt (CVE-2023-50164) M2""

SID: 2049668

Revision: 1

Class Type: attempted-admin

Metadata: affected_product Apache_Struts2, attack_target Web_Server, created_at 2023_12_12, cve CVE_2023_50164, deployment Perimeter, deployment Internal, performance_impact Low, confidence High, signature_severity Major, updated_at 2023_12_12

Reference:

• cve

• 2023-50164

Protocol: tcp

Source Network: any

Source Port: any

Destination Network: $HOME_NET

Destination Port: $HTTP_PORTS

Flow: established,to_server

Contents:

• Value: "POST"

• Value: "/upload.action"

• Value: "uploadFileName|3d|"

Within:

PCRE: "/uploadFileName\x3d(\x2e\x2e\x2f|\x252e\x252e\x252f)/Ui"

Special Options:

• http_method

• http_uri

• http_uri

• nocase

• fast_pattern

source