[STR-3225] Want confiramtion CVE: CVE-2018-11776 vulnerability is also impacted Struts1.x ?

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Not A Bug
• Affects Version/s: 1.3.10
• Fix Version/s: Pending Review
• Component/s: Core
• Environment: Linux + Apache tomcat 9.0.5+ struts 1.3.10
• Assignee: Unassigned
• Reporter: sushil
• Created: 27/Aug/18 10:36
• Updated: 27/Aug/18 11:46
• Resolved: 27/Aug/18 11:46

Description

Our Product released stop because Struts is impacted of  CVE-2018-11776 .So we need confirmation is also impacted struts 1.3.10 if so do we have any workaround for same.