PRP: Request CVE-2024-53677 Remote Code Execution Vulnerability in Apache Struts

[xu-xiang]

Hello,

I would like to start implementing a plugin to detect the vulnerability described in S2-067. This vulnerability has been addressed by upgrading to Struts 6.4.0 or greater and migrating to the new file upload mechanism.

The vulnerability has been assigned CVE ID CVE-2024-53677.

[tooryx]

Hi @xu-xiang,

This generally seems like something that we would be interested in. But transforming a file upload generically into an RCE can be challenging. Additionally, it can pause the issue of deleting the file afterwards.

Could you provide more information on how you would write a detector for this?

~tooryx