My Maven Eclipse pluing tells me that struts2-core-2.2.1 depends on xwork-core-2.2.1.
On Sat, Nov 13, 2010 at 8:36 PM, Sarr, Nathan <ns...@library.rochester.edu>wrote: > Hello, > > I was wondering if someone could help me out with the Struts 2.2.1 > dependency list. It looks like struts 2.2.1 depends on XWork 2.1.6. > However the release notes for Strtus 2.2.1 recommend using XWork 2.2.0. I > couldn't find XWork 2.2.0 but could find XWork 2.2.1. > > Is it recommended to upgrade to XWork 2.2.1 and Ognl 3.0 to fix the > critical XWork vulnerability fixed in Stuts 2.2.1? > > Thanks in advance for the help. > -Nate >
