Hot Topics

Path Traversal Attacks

CVE-2023-50164: A Critical Vulnerability in Apache Struts

| | Apache Struts, application vulnerability, CVE, Imperva Threat Research, Path Traversal Attacks, Threat Research, vulnerability
On December 7, 2023, Apache released a security advisory regarding CVE-2023-50164, a critical vulnerability in Apache Struts with CVSS score 9.8. Versions from 2.5.0 to 2.5.32 and 6.0.0 to 6.3.0 were affected.  ...
Blog

How RASP Protects Apache Servers from zero-day Path Traversal Attacks (CVE-2021-41773)

| | Apache, Application Security, Digest, Path Traversal Attacks, runtime application self-protection, zero-day
In late September of 2021, a path traversal and file disclosure vulnerability was disclosed and reported as CVE-2021-41773 in Apache HTTP Server version 2.4.29. Both Windows and Linux servers are affected. This ...
Blog