Toot

Written by Kevin Beaumont on 2024-12-18 at 17:25

On CVE-2024-53677 (Struts vuln), it's following a very similar path to the Struts 2 vuln this time last year:

• Media are reporting it is being exploited in the wild. It isn't. People are spraying and praying - the exploit payloads don't work.

• People are posting a PoC for it. The PoC doesn't work. You'd have to make a vulnerable webapp, and then tailor the PoC to it.

Not to downplay it, just keep calm and patch. You may have noticed the internet didn't melt last time.

=> View attached media

=> More informations about this toot | View the thread | More toots from GossiTheDog@cyberplace.social

Mentions

Tags