The Apache Software Foundation Updates Struts 2

Release Date

The Apache Software Foundation has released security updates to address a vulnerability (CVE-2023-50164) in Struts 2. A remote attacker could exploit this vulnerability to take control of an affected system.

Users and administrators are encouraged to review the Apache Security Bulletin and upgrade to Struts 2.5.33 or Struts or greater.

This product is provided subject to this Notification and this Privacy & Use policy.