CVE-2024-53677 Analysis

This repository contains documentation and lab artifacts prepared for analyzing CVE-2024-53677 in Apache Struts.

Overview

CVE-2024-53677 is a vulnerability in Apache Struts file upload handling. The issue occurs when filename-related metadata from the legacy FileUploadInterceptor is treated like a normal action parameter and then used in server-side path calculation. This repository was organized to keep the analysis report, screenshots, and local lab snapshot together for documentation and reproducibility.

Documentation

• Analysis report: docs/CVE-2024-53677_Analysis-Report.md
• Screenshots: docs/assets/
• Lab snapshot: docker/

Environment

• Apache Struts 2 file upload analysis target
• Docker-based lab snapshot
• Upload page artifact under docker/index.jsp

Quick Start

1. Git Clone

git clone https://github.com/sangrok-jeon/CVE-2024-53677-Analysis.git
cd CVE-2024-53677-Analysis

2. Read the Analysis Report

Open:

• docs/CVE-2024-53677_Analysis-Report.md

3. Review the Captured Artifacts

See:

• docs/assets/
• docker/

Project Structure

.
|-- docker/
|   |-- Dockerfile
|   `-- index.jsp
|-- docs/
|   |-- CVE-2024-53677_Analysis-Report.md
|   `-- assets/
`-- README.md

Notes

• This repository was prepared for local security research and documentation.
• The detailed write-up and reproduction screenshots are included under docs/.
• The current snapshot focuses on analysis material and lab artifacts related to CVE-2024-53677.

Author

Created by JSR for security research and lab-based CVE analysis.

Disclaimer

This repository is intended for authorized security research and educational purposes only. Do not use it against systems without explicit permission.