Lucene search

K
cisaCISACISA:3D9E69A26C68866B64ED6E4B31E270E6
HistoryAug 14, 2020 - 12:00 a.m.

Apache Releases Security Advisory for Struts 2

2020-08-1400:00:00
us-cert.cisa.gov
35

EPSS

0.953

Percentile

99.4%

The Apache Software Foundation has released a security advisory to address vulnerabilities in Struts in the version range 2.0.0—2.5.20. An attacker could exploit one of these vulnerabilities to take control of an affected system. The current version, Struts 2.5.22, is not affected.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Apache’s security advisory for CVE-2019-0230 and CVE-2019-0233 and upgrade to the appropriate version.

This product is provided subject to this Notification and this Privacy & Use policy.

Please share your thoughts.

We recently updated our anonymous product survey; we’d welcome your feedback.