{"document":{"aggregate_severity":{"namespace":"https://access.redhat.com/security/updates/classification/","text":"Critical"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright © Red Hat, Inc. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"legal_disclaimer","text":"This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.","title":"Terms of Use"}],"publisher":{"category":"vendor","contact_details":"https://access.redhat.com/security/team/contact/","issuing_authority":"Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.","name":"Red Hat Product Security","namespace":"https://www.redhat.com"},"references":[{"category":"self","summary":"Canonical URL","url":"https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-50164.json"}],"title":"Struts: File upload component had a directory traversal vulnerability","tracking":{"current_release_date":"2026-08-10T15:18:36+00:00","generator":{"date":"2026-08-10T15:18:36+00:00","engine":{"name":"Red Hat SDEngine","version":"5.3.14"}},"id":"CVE-2023-50164","initial_release_date":"2023-12-07T00:00:00+00:00","revision_history":[{"date":"2023-12-07T00:00:00+00:00","number":"1","summary":"Initial version"},{"date":"2026-08-04T14:59:07+00:00","number":"2","summary":"Current version"},{"date":"2026-08-10T15:18:36+00:00","number":"3","summary":"Last generated version"}],"status":"final","version":"3"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"A-MQ Clients 2","product":{"name":"A-MQ Clients 2","product_id":"a-mq_clients_2","product_identification_helper":{"cpe":"cpe:/a:redhat:a_mq_clients:2"}}}],"category":"product_family","name":"A-MQ Clients 2"},{"branches":[{"category":"product_name","name":"Migration Toolkit for Applications 6","product":{"name":"Migration Toolkit for Applications 6","product_id":"migration_toolkit_for_applications_6","product_identification_helper":{"cpe":"cpe:/a:redhat:migration_toolkit_applications:6"}}}],"category":"product_family","name":"Migration Toolkit for Applications 6"},{"branches":[{"category":"product_name","name":"Migration Toolkit for Runtimes","product":{"name":"Migration Toolkit for Runtimes","product_id":"migration_toolkit_for_runtimes","product_identification_helper":{"cpe":"cpe:/a:redhat:migration_toolkit_runtimes:1"}}}],"category":"product_family","name":"Migration Toolkit for Runtimes"},{"branches":[{"category":"product_name","name":"OpenShift Serverless","product":{"name":"OpenShift Serverless","product_id":"openshift_serverless","product_identification_helper":{"cpe":"cpe:/a:redhat:serverless:1"}}}],"category":"product_family","name":"OpenShift Serverless"},{"branches":[{"category":"product_name","name":"Red Hat AMQ Broker 7","product":{"name":"Red Hat AMQ Broker 7","product_id":"red_hat_amq_broker_7","product_identification_helper":{"cpe":"cpe:/a:redhat:amq_broker:7"}}}],"category":"product_family","name":"Red Hat AMQ Broker 7"},{"branches":[{"category":"product_name","name":"Red Hat build of Apache Camel for Spring Boot 3","product":{"name":"Red Hat build of Apache Camel for Spring Boot 3","product_id":"red_hat_build_of_apache_camel_for_spring_boot_3","product_identification_helper":{"cpe":"cpe:/a:redhat:camel_spring_boot:3"}}}],"category":"product_family","name":"Red Hat build of Apache Camel for Spring Boot 3"},{"branches":[{"category":"product_name","name":"Red Hat build of Debezium 2","product":{"name":"Red Hat build of Debezium 2","product_id":"red_hat_build_of_debezium_2","product_identification_helper":{"cpe":"cpe:/a:redhat:debezium:2"}}}],"category":"product_family","name":"Red Hat build of Debezium 2"},{"branches":[{"category":"product_name","name":"Red Hat Build of Keycloak","product":{"name":"Red Hat Build of Keycloak","product_id":"red_hat_build_of_keycloak","product_identification_helper":{"cpe":"cpe:/a:redhat:build_keycloak:"}}}],"category":"product_family","name":"Red Hat Build of Keycloak"},{"branches":[{"category":"product_name","name":"Red Hat build of OptaPlanner 8","product":{"name":"Red Hat build of OptaPlanner 8","product_id":"red_hat_build_of_optaplanner_8","product_identification_helper":{"cpe":"cpe:/a:redhat:optaplanner:::el6"}}}],"category":"product_family","name":"Red Hat build of OptaPlanner 8"},{"branches":[{"category":"product_name","name":"Red Hat build of Quarkus","product":{"name":"Red Hat build of Quarkus","product_id":"red_hat_build_of_quarkus","product_identification_helper":{"cpe":"cpe:/a:redhat:quarkus:2"}}}],"category":"product_family","name":"Red Hat build of Quarkus"},{"branches":[{"category":"product_name","name":"Red Hat Data Grid 8","product":{"name":"Red Hat Data Grid 8","product_id":"red_hat_data_grid_8","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_data_grid:8"}}}],"category":"product_family","name":"Red Hat Data Grid 8"},{"branches":[{"category":"product_name","name":"Red Hat Decision Manager 7","product":{"name":"Red Hat Decision Manager 7","product_id":"red_hat_decision_manager_7","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_brms_platform:7"}}}],"category":"product_family","name":"Red Hat Decision Manager 7"},{"branches":[{"category":"product_name","name":"Red Hat Fuse 7","product":{"name":"Red Hat Fuse 7","product_id":"red_hat_fuse_7","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_fuse:7"}}}],"category":"product_family","name":"Red Hat Fuse 7"},{"branches":[{"category":"product_name","name":"Red Hat Integration Camel K 1","product":{"name":"Red Hat Integration Camel K 1","product_id":"red_hat_integration_camel_k_1","product_identification_helper":{"cpe":"cpe:/a:redhat:integration:1"}}}],"category":"product_family","name":"Red Hat Integration Camel K 1"},{"branches":[{"category":"product_name","name":"Red Hat Integration Camel Quarkus 2","product":{"name":"Red Hat Integration Camel Quarkus 2","product_id":"red_hat_integration_camel_quarkus_2","product_identification_helper":{"cpe":"cpe:/a:redhat:camel_quarkus:2"}}}],"category":"product_family","name":"Red Hat Integration Camel Quarkus 2"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Data Grid 7","product":{"name":"Red Hat JBoss Data Grid 7","product_id":"red_hat_jboss_data_grid_7","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_data_grid:7"}}}],"category":"product_family","name":"Red Hat JBoss Data Grid 7"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Enterprise Application Platform 6","product":{"name":"Red Hat JBoss Enterprise Application Platform 6","product_id":"red_hat_jboss_enterprise_application_platform_6","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_application_platform:6"}}}],"category":"product_family","name":"Red Hat JBoss Enterprise Application Platform 6"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Enterprise Application Platform 7","product":{"name":"Red Hat JBoss Enterprise Application Platform 7","product_id":"red_hat_jboss_enterprise_application_platform_7","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_application_platform:7"}}}],"category":"product_family","name":"Red Hat JBoss Enterprise Application Platform 7"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Enterprise Application Platform 8","product":{"name":"Red Hat JBoss Enterprise Application Platform 8","product_id":"red_hat_jboss_enterprise_application_platform_8","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_application_platform:8"}}}],"category":"product_family","name":"Red Hat JBoss Enterprise Application Platform 8"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Enterprise Application Platform Expansion Pack","product":{"name":"Red Hat JBoss Enterprise Application Platform Expansion Pack","product_id":"red_hat_jboss_enterprise_application_platform_expansion_pack","product_identification_helper":{"cpe":"cpe:/a:redhat:jbosseapxp"}}}],"category":"product_family","name":"Red Hat JBoss Enterprise Application Platform Expansion Pack"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Fuse 6","product":{"name":"Red Hat JBoss Fuse 6","product_id":"red_hat_jboss_fuse_6","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_fuse:6"}}}],"category":"product_family","name":"Red Hat JBoss Fuse 6"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Fuse Service Works 6","product":{"name":"Red Hat JBoss Fuse Service Works 6","product_id":"red_hat_jboss_fuse_service_works_6","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_fuse_service_works:6"}}}],"category":"product_family","name":"Red Hat JBoss Fuse Service Works 6"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Web Server 5","product":{"name":"Red Hat JBoss Web Server 5","product_id":"red_hat_jboss_web_server_5","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_web_server:5"}}}],"category":"product_family","name":"Red Hat JBoss Web Server 5"},{"branches":[{"category":"product_name","name":"Red Hat Process Automation 7","product":{"name":"Red Hat Process Automation 7","product_id":"red_hat_process_automation_7","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_bpms_platform:7"}}}],"category":"product_family","name":"Red Hat Process Automation 7"},{"branches":[{"category":"product_name","name":"Red Hat Single Sign-On 7","product":{"name":"Red Hat Single Sign-On 7","product_id":"red_hat_single_sign-on_7","product_identification_helper":{"cpe":"cpe:/a:redhat:red_hat_single_sign_on:7"}}}],"category":"product_family","name":"Red Hat Single Sign-On 7"},{"branches":[{"category":"product_name","name":"Red Hat support for Spring Boot","product":{"name":"Red Hat support for Spring Boot","product_id":"red_hat_support_for_spring_boot","product_identification_helper":{"cpe":"cpe:/a:redhat:openshift_application_runtimes:1.0"}}}],"category":"product_family","name":"Red Hat support for Spring Boot"},{"branches":[{"category":"product_name","name":"streams for Apache Kafka","product":{"name":"streams for Apache Kafka","product_id":"streams_for_apache_kafka","product_identification_helper":{"cpe":"cpe:/a:redhat:amq_streams:1"}}}],"category":"product_family","name":"streams for Apache Kafka"},{"category":"product_version","name":"org.apache.struts-struts-core","product":{"name":"org.apache.struts-struts-core","product_id":"org.apache.struts-struts-core"}},{"category":"product_version","name":"org.apache.struts-struts-core.src","product":{"name":"org.apache.struts-struts-core.src","product_id":"org.apache.struts-struts-core.src","product_identification_helper":{"purl":"pkg:rpm/redhat/org.apache.struts-struts-core?arch=src"}}},{"category":"product_version","name":"struts-core","product":{"name":"struts-core","product_id":"struts-core","product_identification_helper":{"purl":"pkg:maven/org.apache.struts/struts-core"}}},{"category":"product_version","name":"org.keycloak-keycloak-parent","product":{"name":"org.keycloak-keycloak-parent","product_id":"org.keycloak-keycloak-parent"}}],"category":"vendor","name":"Red Hat"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of A-MQ Clients 2","product_id":"a-mq_clients_2:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"a-mq_clients_2"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core.src as a component of Migration Toolkit for Applications 6","product_id":"migration_toolkit_for_applications_6:org.apache.struts-struts-core.src"},"product_reference":"org.apache.struts-struts-core.src","relates_to_product_reference":"migration_toolkit_for_applications_6"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core.src as a component of Migration Toolkit for Runtimes","product_id":"migration_toolkit_for_runtimes:org.apache.struts-struts-core.src"},"product_reference":"org.apache.struts-struts-core.src","relates_to_product_reference":"migration_toolkit_for_runtimes"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of OpenShift Serverless","product_id":"openshift_serverless:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"openshift_serverless"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat AMQ Broker 7","product_id":"red_hat_amq_broker_7:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_amq_broker_7"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat build of Apache Camel for Spring Boot 3","product_id":"red_hat_build_of_apache_camel_for_spring_boot_3:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_build_of_apache_camel_for_spring_boot_3"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat build of Debezium 2","product_id":"red_hat_build_of_debezium_2:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_build_of_debezium_2"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat Build of Keycloak","product_id":"red_hat_build_of_keycloak:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_build_of_keycloak"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat build of OptaPlanner 8","product_id":"red_hat_build_of_optaplanner_8:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_build_of_optaplanner_8"},{"category":"default_component_of","full_product_name":{"name":"struts-core as a component of Red Hat build of Quarkus","product_id":"red_hat_build_of_quarkus:struts-core"},"product_reference":"struts-core","relates_to_product_reference":"red_hat_build_of_quarkus"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat Data Grid 8","product_id":"red_hat_data_grid_8:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_data_grid_8"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat Decision Manager 7","product_id":"red_hat_decision_manager_7:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_decision_manager_7"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat Fuse 7","product_id":"red_hat_fuse_7:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_fuse_7"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat Integration Camel K 1","product_id":"red_hat_integration_camel_k_1:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_integration_camel_k_1"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat Integration Camel Quarkus 2","product_id":"red_hat_integration_camel_quarkus_2:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_integration_camel_quarkus_2"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat JBoss Data Grid 7","product_id":"red_hat_jboss_data_grid_7:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_jboss_data_grid_7"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat JBoss Enterprise Application Platform 6","product_id":"red_hat_jboss_enterprise_application_platform_6:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_jboss_enterprise_application_platform_6"},{"category":"default_component_of","full_product_name":{"name":"org.keycloak-keycloak-parent as a component of Red Hat JBoss Enterprise Application Platform 6","product_id":"red_hat_jboss_enterprise_application_platform_6:org.keycloak-keycloak-parent"},"product_reference":"org.keycloak-keycloak-parent","relates_to_product_reference":"red_hat_jboss_enterprise_application_platform_6"},{"category":"default_component_of","full_product_name":{"name":"struts-core as a component of Red Hat JBoss Enterprise Application Platform 7","product_id":"red_hat_jboss_enterprise_application_platform_7:struts-core"},"product_reference":"struts-core","relates_to_product_reference":"red_hat_jboss_enterprise_application_platform_7"},{"category":"default_component_of","full_product_name":{"name":"struts-core as a component of Red Hat JBoss Enterprise Application Platform 8","product_id":"red_hat_jboss_enterprise_application_platform_8:struts-core"},"product_reference":"struts-core","relates_to_product_reference":"red_hat_jboss_enterprise_application_platform_8"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack","product_id":"red_hat_jboss_enterprise_application_platform_expansion_pack:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_jboss_enterprise_application_platform_expansion_pack"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat JBoss Fuse 6","product_id":"red_hat_jboss_fuse_6:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_jboss_fuse_6"},{"category":"default_component_of","full_product_name":{"name":"struts-core as a component of Red Hat JBoss Fuse 6","product_id":"red_hat_jboss_fuse_6:struts-core"},"product_reference":"struts-core","relates_to_product_reference":"red_hat_jboss_fuse_6"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat JBoss Fuse Service Works 6","product_id":"red_hat_jboss_fuse_service_works_6:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_jboss_fuse_service_works_6"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat JBoss Web Server 5","product_id":"red_hat_jboss_web_server_5:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_jboss_web_server_5"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat Process Automation 7","product_id":"red_hat_process_automation_7:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_process_automation_7"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat Single Sign-On 7","product_id":"red_hat_single_sign-on_7:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_single_sign-on_7"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of Red Hat support for Spring Boot","product_id":"red_hat_support_for_spring_boot:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"red_hat_support_for_spring_boot"},{"category":"default_component_of","full_product_name":{"name":"org.apache.struts-struts-core as a component of streams for Apache Kafka","product_id":"streams_for_apache_kafka:org.apache.struts-struts-core"},"product_reference":"org.apache.struts-struts-core","relates_to_product_reference":"streams_for_apache_kafka"}]},"vulnerabilities":[{"cve":"CVE-2023-50164","cwe":{"id":"CWE-552","name":"Files or Directories Accessible to External Parties"},"discovery_date":"2023-12-11T00:00:00+00:00","flags":[{"label":"vulnerable_code_not_present","product_ids":["a-mq_clients_2:org.apache.struts-struts-core","migration_toolkit_for_applications_6:org.apache.struts-struts-core.src","migration_toolkit_for_runtimes:org.apache.struts-struts-core.src","openshift_serverless:org.apache.struts-struts-core","red_hat_amq_broker_7:org.apache.struts-struts-core","red_hat_build_of_apache_camel_for_spring_boot_3:org.apache.struts-struts-core","red_hat_build_of_debezium_2:org.apache.struts-struts-core","red_hat_build_of_keycloak:org.apache.struts-struts-core","red_hat_build_of_optaplanner_8:org.apache.struts-struts-core","red_hat_build_of_quarkus:struts-core","red_hat_data_grid_8:org.apache.struts-struts-core","red_hat_decision_manager_7:org.apache.struts-struts-core","red_hat_fuse_7:org.apache.struts-struts-core","red_hat_integration_camel_k_1:org.apache.struts-struts-core","red_hat_integration_camel_quarkus_2:org.apache.struts-struts-core","red_hat_jboss_data_grid_7:org.apache.struts-struts-core","red_hat_jboss_enterprise_application_platform_6:org.apache.struts-struts-core","red_hat_jboss_enterprise_application_platform_6:org.keycloak-keycloak-parent","red_hat_jboss_enterprise_application_platform_7:struts-core","red_hat_jboss_enterprise_application_platform_8:struts-core","red_hat_jboss_enterprise_application_platform_expansion_pack:org.apache.struts-struts-core","red_hat_jboss_fuse_6:org.apache.struts-struts-core","red_hat_jboss_fuse_6:struts-core","red_hat_jboss_fuse_service_works_6:org.apache.struts-struts-core","red_hat_jboss_web_server_5:org.apache.struts-struts-core","red_hat_process_automation_7:org.apache.struts-struts-core","red_hat_single_sign-on_7:org.apache.struts-struts-core","red_hat_support_for_spring_boot:org.apache.struts-struts-core","streams_for_apache_kafka:org.apache.struts-struts-core"]}],"ids":[{"system_name":"Red Hat Bugzilla ID","text":"2253938"}],"notes":[{"category":"description","text":"A flaw was found in Apache Struts. Affected versions of this package are vulnerable to Remote Code Execution (RCE) via manipulation of file upload parameters that enable path traversal. Under certain conditions, uploading a malicious file is possible, which may then be executed on the server.","title":"Vulnerability description"},{"category":"summary","text":"Struts: File upload component had a directory traversal vulnerability","title":"Vulnerability summary"},{"category":"general","text":"The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.","title":"CVSS score applicability"}],"product_status":{"known_not_affected":["a-mq_clients_2:org.apache.struts-struts-core","migration_toolkit_for_applications_6:org.apache.struts-struts-core.src","migration_toolkit_for_runtimes:org.apache.struts-struts-core.src","openshift_serverless:org.apache.struts-struts-core","red_hat_amq_broker_7:org.apache.struts-struts-core","red_hat_build_of_apache_camel_for_spring_boot_3:org.apache.struts-struts-core","red_hat_build_of_debezium_2:org.apache.struts-struts-core","red_hat_build_of_keycloak:org.apache.struts-struts-core","red_hat_build_of_optaplanner_8:org.apache.struts-struts-core","red_hat_build_of_quarkus:struts-core","red_hat_data_grid_8:org.apache.struts-struts-core","red_hat_decision_manager_7:org.apache.struts-struts-core","red_hat_fuse_7:org.apache.struts-struts-core","red_hat_integration_camel_k_1:org.apache.struts-struts-core","red_hat_integration_camel_quarkus_2:org.apache.struts-struts-core","red_hat_jboss_data_grid_7:org.apache.struts-struts-core","red_hat_jboss_enterprise_application_platform_6:org.apache.struts-struts-core","red_hat_jboss_enterprise_application_platform_6:org.keycloak-keycloak-parent","red_hat_jboss_enterprise_application_platform_7:struts-core","red_hat_jboss_enterprise_application_platform_8:struts-core","red_hat_jboss_enterprise_application_platform_expansion_pack:org.apache.struts-struts-core","red_hat_jboss_fuse_6:org.apache.struts-struts-core","red_hat_jboss_fuse_6:struts-core","red_hat_jboss_fuse_service_works_6:org.apache.struts-struts-core","red_hat_jboss_web_server_5:org.apache.struts-struts-core","red_hat_process_automation_7:org.apache.struts-struts-core","red_hat_single_sign-on_7:org.apache.struts-struts-core","red_hat_support_for_spring_boot:org.apache.struts-struts-core","streams_for_apache_kafka:org.apache.struts-struts-core"]},"references":[{"category":"self","summary":"Canonical URL","url":"https://access.redhat.com/security/cve/CVE-2023-50164"},{"category":"external","summary":"RHBZ#2253938","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253938"},{"category":"external","summary":"https://www.cve.org/CVERecord?id=CVE-2023-50164","url":"https://www.cve.org/CVERecord?id=CVE-2023-50164"},{"category":"external","summary":"https://nvd.nist.gov/vuln/detail/CVE-2023-50164","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50164"},{"category":"external","summary":"https://lists.apache.org/thread/yh09b3fkf6vz5d6jdgrlvmg60lfwtqhj","url":"https://lists.apache.org/thread/yh09b3fkf6vz5d6jdgrlvmg60lfwtqhj"}],"release_date":"2023-12-07T00:00:00+00:00","scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["a-mq_clients_2:org.apache.struts-struts-core","migration_toolkit_for_applications_6:org.apache.struts-struts-core.src","migration_toolkit_for_runtimes:org.apache.struts-struts-core.src","openshift_serverless:org.apache.struts-struts-core","red_hat_amq_broker_7:org.apache.struts-struts-core","red_hat_build_of_apache_camel_for_spring_boot_3:org.apache.struts-struts-core","red_hat_build_of_debezium_2:org.apache.struts-struts-core","red_hat_build_of_keycloak:org.apache.struts-struts-core","red_hat_build_of_optaplanner_8:org.apache.struts-struts-core","red_hat_build_of_quarkus:struts-core","red_hat_data_grid_8:org.apache.struts-struts-core","red_hat_decision_manager_7:org.apache.struts-struts-core","red_hat_fuse_7:org.apache.struts-struts-core","red_hat_integration_camel_k_1:org.apache.struts-struts-core","red_hat_integration_camel_quarkus_2:org.apache.struts-struts-core","red_hat_jboss_data_grid_7:org.apache.struts-struts-core","red_hat_jboss_enterprise_application_platform_6:org.apache.struts-struts-core","red_hat_jboss_enterprise_application_platform_6:org.keycloak-keycloak-parent","red_hat_jboss_enterprise_application_platform_7:struts-core","red_hat_jboss_enterprise_application_platform_8:struts-core","red_hat_jboss_enterprise_application_platform_expansion_pack:org.apache.struts-struts-core","red_hat_jboss_fuse_6:org.apache.struts-struts-core","red_hat_jboss_fuse_6:struts-core","red_hat_jboss_fuse_service_works_6:org.apache.struts-struts-core","red_hat_jboss_web_server_5:org.apache.struts-struts-core","red_hat_process_automation_7:org.apache.struts-struts-core","red_hat_single_sign-on_7:org.apache.struts-struts-core","red_hat_support_for_spring_boot:org.apache.struts-struts-core","streams_for_apache_kafka:org.apache.struts-struts-core"]}],"threats":[{"category":"impact","details":"Critical","product_ids":["a-mq_clients_2:org.apache.struts-struts-core","migration_toolkit_for_applications_6:org.apache.struts-struts-core.src","migration_toolkit_for_runtimes:org.apache.struts-struts-core.src","openshift_serverless:org.apache.struts-struts-core","red_hat_amq_broker_7:org.apache.struts-struts-core","red_hat_build_of_apache_camel_for_spring_boot_3:org.apache.struts-struts-core","red_hat_build_of_debezium_2:org.apache.struts-struts-core","red_hat_build_of_keycloak:org.apache.struts-struts-core","red_hat_build_of_optaplanner_8:org.apache.struts-struts-core","red_hat_build_of_quarkus:struts-core","red_hat_data_grid_8:org.apache.struts-struts-core","red_hat_decision_manager_7:org.apache.struts-struts-core","red_hat_fuse_7:org.apache.struts-struts-core","red_hat_integration_camel_k_1:org.apache.struts-struts-core","red_hat_integration_camel_quarkus_2:org.apache.struts-struts-core","red_hat_jboss_data_grid_7:org.apache.struts-struts-core","red_hat_jboss_enterprise_application_platform_6:org.apache.struts-struts-core","red_hat_jboss_enterprise_application_platform_6:org.keycloak-keycloak-parent","red_hat_jboss_enterprise_application_platform_7:struts-core","red_hat_jboss_enterprise_application_platform_8:struts-core","red_hat_jboss_enterprise_application_platform_expansion_pack:org.apache.struts-struts-core","red_hat_jboss_fuse_6:org.apache.struts-struts-core","red_hat_jboss_fuse_6:struts-core","red_hat_jboss_fuse_service_works_6:org.apache.struts-struts-core","red_hat_jboss_web_server_5:org.apache.struts-struts-core","red_hat_process_automation_7:org.apache.struts-struts-core","red_hat_single_sign-on_7:org.apache.struts-struts-core","red_hat_support_for_spring_boot:org.apache.struts-struts-core","streams_for_apache_kafka:org.apache.struts-struts-core"]}],"title":"Struts: File upload component had a directory traversal vulnerability"}]}