Categories: US-Cert-Repository

Apache Releases Security Advisory for Apache Struts



Original release date: November 05, 2018

The Apache Software Foundation has released an advisory to address a vulnerable commons-fileupload library used in Apache Struts versions 2.3.36 and prior. A remote attacker could exploit this vulnerability to take control of an affected system. Struts versions from 2.5.12 are not affected.

NCCIC encourages users and administrators of Apache Struts versions 2.3.36 and prior to review the Apache security advisory for CVE-2016-1000031 and upgrade to the latest released version of Commons FileUpload library, which is currently 1.3.3.


This product is provided subject to this Notification and this Privacy & Use policy.



Source link

admin

Share
Published by
admin

Recent Posts

Multiple Vulnerabilities in Microsoft Windows Components and Outlook Express

Systems Affected   Microsoft Windows Systems   Overview   Microsoft has released a Security Bulletin…

13 hours ago

Multiple Vulnerabilities in Microsoft Windows Components and Outlook Express

Systems Affected   Microsoft Windows Systems   Overview   Microsoft has released a Security Bulletin…

2 days ago

New Variant of MyDoom Virus

Systems Affected   Microsoft Windows Systems   Overview   A new variant of the MyDoom…

3 days ago

Multiple Vulnerabilities in Systems Running Microsoft Windows

Systems Affected   Microsoft Windows systems; specifically, some versions of the following programs: Microsoft Windows…

4 days ago

Critical Vulnerabilities in Microsoft Windows

Systems Affected These vulnerabilities affect the following versions of Microsoft Internet Explorer: Microsoft Internet Explorer…

5 days ago

Multiple Vulnerabilities in libpng

Systems Affected Applications and systems that use the libpng library. Overview Several vulnerabilities exist in…

6 days ago

This website uses cookies.