Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Thursday, 19-Dec-2024 02:26:15 JST Kevin Beaumont

   in reply to

   On CVE-2024-53677 (Struts vuln), it's following a very similar path to the Struts 2 vuln last year:

   - Media are reporting it is being exploited in the wild. It isn't. People are spraying and praying - the exploit payloads don't work.

   - People are posting a PoC for it. The PoC doesn't work. You'd have to make a vulnerable webapp, and then tailor the PoC to it.

   Not to downplay it, just keep calm and patch. You may have noticed the internet didn't melt last time.