[ANN] A crafted XML request can be used to perform a DoS attack when using the Struts REST plugin

2018-03-27 Thread Lukasz Lenart
The Apache Security Struts Team recommends to immediately upgrade your Struts 2 based projects to use the latest released version of the Apache Struts. This is necessary to prevent your publicly accessible web site, which is using the Struts REST plugin and performing XML serialisation, from being

[ANN] Immediately upgrade commons-fileupload to version 1.3.3

2018-03-27 Thread Lukasz Lenart
The Apache Struts Team recommends to immediately upgrade your Struts 2 based projects to use the latest released version of Commons FileUpload library, which is currently 1.3.3. This is necessary to prevent your publicly accessible web site from being exposed to possible Remote Code Execution attac