Embed Notice

On CVE-2024-53677 (Struts vuln), it's following a very similar path to the Struts 2 vuln last year:

- Media are reporting it is being exploited in the wild. It isn't. People are spraying and praying - the exploit payloads don't work.

- People are posting a PoC for it. The PoC doesn't work. You'd have to make a vulnerable webapp, and then tailor the PoC to it.

Not to downplay it, just keep calm and patch. You may have noticed the internet didn't melt last time.