CVE-2017-5638 — Apache Struts Remote Code Execution Vulnerability

CISA KEVExploited: confirmedApache

Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.

Vulnerability details