s2-067(CVE-2024-53677)

s2-067(CVE-2024-53677)

Published 12 Oct 2026Updated 12 Oct 2026127 sources
CVSS 0.0 PoC CANDIDATE

What happened

A public source linked this CVE to an advisory or demonstration repository. Review the original reference before use.

Affected versions

Unknown product: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

  • Review the original advisory and validate affected versions.
  • Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference
PoC-in-GitHub · cloudwafs/s2-067-CVE-2024-53677s2-067(CVE-2024-53677)★ 9cloudwafs2024-12-12CandidatePoC-in-GitHub · TAM-K592/CVE-2024-53677-S2-067A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute arbitrary code remotely. This vulnerability arises from flaws in the file upload logic, which can be exploited to perform path traversal and malicious file uploads.★ 95TAM-K5922024-12-13CandidatePoC-in-GitHub · yangyanglo/CVE-2024-53677★ 3yangyanglo2024-12-17CandidatePoC-in-GitHub · c4oocO/CVE-2024-53677-DockerA Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2.★ 3c4oocO2024-12-17CandidatePoC-in-GitHub · dustblessnotdust/CVE-2024-53677-S2-067-thread★ 2dustblessnotdust2024-12-18CandidatePoC-in-GitHub · hiteshpatra/CVE-2024-53677★ 0hiteshpatra2024-12-23CandidatePoC-in-GitHub · EQSTLab/CVE-2024-53677File upload logic flaw in Apache Struts2 exploit★ 17EQSTLab2025-01-03CandidatePoC-in-GitHub · 0xPThree/struts_cve-2024-53677★ 00xPThree2025-01-07CandidatePoC-in-GitHub · SeanRickerd/CVE-2024-53677Vulnerable Environment and Exploit for CVE-2024-53677★ 3SeanRickerd2025-01-10CandidatePoC-in-GitHub · hopsypopsy8/CVE-2024-53677-ExploitationApache Struts CVE-2024-53677 Exploitation★ 0hopsypopsy82025-02-13CandidatePoC-in-GitHub · shishirghimir/CVE-2024-53677-Exploit★ 3shishirghimir2025-02-24CandidatePoC-in-GitHub · BuludX/CVE-2024-53677CVE-2024-53677★ 0BuludX2025-05-20CandidatePoC-in-GitHub · r007sec/CVE-2024-53677★ 2r007sec2025-06-03CandidatePoC-in-GitHub · Cythonic1/CVE-2024-53677-POCa proof of concept of CVE-2024-53677★ 1Cythonic12025-09-01CandidatePoC-in-GitHub · seoyoung-kang/CVE-2024-53677CVE-2024-53677 관련 컨설턴트용 툴 개발★ 0seoyoung-kang2025-10-15CandidatePoC-in-GitHub · sangrok-jeon/CVE-2024-53677-AnalysisCVE-2024-53677 취약점 분석 보고서★ 0sangrok-jeon2026-03-18CandidatePoC-in-GitHub · ctfsec/CVE-2024-53677Proof of concept exploit for CVE-2024-53677 - Apache Struts file upload path traversal vulnerability leading to Remote Code Execution★ 0ctfsec2026-05-02CandidatePoC-in-GitHub · choyj358/cve-2024-53677★ 0choyj3582026-10-13Candidate