Versions Compared

Old Version 2

changes.mady.by.user Lukasz Lenart

Saved on

compared with

New Version 3

changes.mady.by.user Lukasz Lenart

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

XSLTResult can accept location of a stylesheet passed a request parameter. In some circumstances this can be used to remotely execute arbitrary code.

Solution

Alway Always validate type and content of uploaded files. We encourage you to upgraded upgrade to one of the versions of the Apache Struts presented above.

...