Hi! I just created an issue [1] because the commons-io dependency in the struts2-parent pom is different from the file-upload 1.3 component in the 2.3.15 release. This cause maven dependency resolution of the struts2-core artifact to choose version 2.0.1 of commons-io over 2.2 (which is newer and required by commons-fileupload 1.3).
Adding the dependency into the dependencyManagement section of the project's pom solves the dilemma. Regards, Gabriel [1] https://issues.apache.org/jira/browse/WW-4127
