[WW-4867] Apache Struts framework 1.1 and 2.x vulnerability clarification

• Type: Temp
• Status: Closed
• Priority: Trivial
• Resolution: Not A Problem
• Labels: clarification documentation migration security

Environment

apache Struts framework 1.1

• Assignee: Unassigned
• Reporter: Parthiban Palanisamy
• Created: 04/Oct/17 11:26
• Updated: 04/Oct/17 11:47
• Resolved: 04/Oct/17 11:47

Description

Hello,

I'm the active user of apache Struts framework 1.1 and 2.x. Recently we learned that there is a vulnerability in Apache Struts' Jakarta Multipart parser as high risk. This may lead to warning of remote code execution (RCE) attacks that were evident at Equifax which lead to complete system compromises. So I would like to take your inputs and understand the recent vulnerability over RCE is also affected 1.1/1.x versions precisely.

If yes, could you please support with your thoughts over next course of action to resolve the issue?

Thanks and appreciate your support at the earliest.

Regards,
Parthiban