Re: Struts2 remote commands execution

2010-07-13 Thread Lukasz Lenart
2010/7/13 Johannes Geppert : > is version 2.2.0 also available with maven? Not yet, still in stagging repo only and still under the Vote :-( Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ Kapituła Javarsovia 2010 http://javarsovia.pl --

Re: Struts2 remote commands execution

2010-07-13 Thread Johannes Geppert
.apache.org/builds/struts/2.2.0/ > > More details about this vulnerability can be found here: > http://blog.o0o.nu/2010/07/cve-2010-1870-struts2xwork-remote.html > > Meder > > - --- web: http://www.jgeppert.com twitter: http://twitter.com/jogep -- View this message in

Re: Struts2 remote commands execution

2010-07-13 Thread Greg Lindholm
Thanks for pushing this, your right it is critical and needs to be fixed asap. On Sat, Jul 10, 2010 at 4:02 AM, Meder Kydyraliev wrote: > There's a critical remote commands execution vulnerability in XWork(used by > Struts2), which fixed in 2.2.0, which isn't released yet but can be > downloaded

Re: Struts2 remote commands execution

2010-07-10 Thread Lukasz Lenart
2010/7/10 Meder Kydyraliev : > There's a critical remote commands execution vulnerability in XWork(used by > Struts2), which fixed in 2.2.0, which isn't released yet but can be > downloaded here: http://people.apache.org/builds/struts/2.2.0/ > > More details about this vulnerability can be found he

Struts2 remote commands execution

2010-07-10 Thread Meder Kydyraliev
There's a critical remote commands execution vulnerability in XWork(used by Struts2), which fixed in 2.2.0, which isn't released yet but can be downloaded here: http://people.apache.org/builds/struts/2.2.0/ More details about this vulnerability can be found here: http://blog.o0o.nu/2010/07/cve-201