Apache Struts 2 vulnerability CVE-2024-53677, published in December 2024, exposed a severe flaw in the Struts2 file upload mechanism.