DUE TO SPAM, SIGN-UP IS DISABLED. Goto Selfserve wiki signup and request an account.
...
Who should read this | All Struts 2 developers and users |
|---|---|
Impact of vulnerability | A DoS attack is available for Spring secured actions |
Maximum security rating | Medium |
Recommendation | Upgrade to Struts 2.5.12 |
Affected Software | Struts 2.3.7 - Struts 2.3.32, Struts 2.5 - Struts 2.5.10.1 |
Reporter | Yasser Zamani <yasser dot zamani at live dot com> |
CVE Identifier | CVE-2017-9787 |
...
Upgrade to Apache Struts version 2.5.12 or 2.3.33.
Backward compatibility
No backward incompatibility issues are expected.
...