A Day In The Life Of A Grey Noise Researcher: The Path To Understanding The Remote Code Execution Vulnerability Apache (CVE-2023-50164) in Apache Struts2 | Grey Noise Blog
Summary: GreyNoise Labs researcher Matthew Remacle published an analysis of the newly disclosed Apache Struts2 CVE-2023-50164 file upload vulnerability, which allows an attacker to drop a web shell that can be called remotely through a public interface over defined routes. GreyNoise says it and the wider research community expect to spend the coming weeks investigating vendor and product-specific implementations of Apache Struts2 to determine the exact path that must be traversed to drop a web shell in those products and call it remotely.
Bottom line: The vulnerable component is Apache Struts2, and the open question is which vendor and product implementations expose a route an attacker can traverse to drop and call a web shell - a question GreyNoise says will take weeks to answer.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-40164CVE-2023-50164
- Related
- Storm Watch | Cyber News | New SEC Rules, Threat Predictions, and Vulnerability Impact Scoring Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026