Detect and Manage the Risk of Apache Struts (CVE-2023-50164) Comprehensively

This Qualys advisory details CVE-2023-50164, a critical Apache Struts 2 file-upload/path-traversal vulnerability allowing unauthenticated remote code execution; it notes observed exploitation starting December 13, 2023, lists affected and fixed versions, and provides detection and mitigation guidance—promoting Qualys VMDR, SwCA (Software Composition Analysis), WAS, Container Security QIDs, and remediation/prioritization workflows to locate deep-embedded Struts packages and reduce risk.