AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2017-5638.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSUnscoredNo severity score in this snapshot.
EXPLOITATION STATUSCISA known exploitedAdded Nov 03, 2021
RECORD STATUSAwaiting NVD dataModified Nov 03, 2021

Disclosure summary

Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.

CISA remediation guidance

Apply updates per vendor instructions.

Original records & references

PUBLISHED 2021-11-03T00:00:00-04:00
MODIFIED 2021-11-03T00:00:00-04:00
INGESTED 2026-10-06T11:42:59-04:00