Apache Releases Security Advisory for Struts 2

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

The Apache Software Foundation has released a security advisory to address a vulnerability in Struts in the version range 2.0.0 to 2.5.29. An attacker could exploit this vulnerability to take control of an affected system.

CISA encourages users and administrators to review Apache’s security advisory S2-062 and upgrade to the latest released version.

This product is provided subject to this Notification and this Privacy & Use policy.

Apache Releases Security Advisory for Struts 2

Please share your thoughts