Embed Notice

A bit more on the CVE-2023-50164 hype train - Akamai are seeing same as myself and @shadowserver -

https://www.akamai.com/blog/security-research/apache-struts-cve-exploitation-attempts

Rather bafflingly I keep seeing people at security resellers trying to claim this is evidence of "nation state zero days".

To be super clear about this one, the request below is for a specific Tomcat webapp called 'upload' - the webapp has exactly one function, upload, which is set up to be exploitable by this CVE.