"Apache Struts Vulnerabilities Allow Remote Code Execution, DoS"

The Apache Software Foundation has released security advisories about vulnerabilities discovered in Apache Struts versions  2.0.0 through 2.5.20 that have the potential to help launch remote code-execution (RCE) and denial-of-service (DoS) attacks on vulnerable installations. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) also issued an alert regarding the two vulnerabilities, urging system administrators to patch the flaws. This article continues to discuss where the Apache Struts vulnerabilities come from and the malicious activities that could be performed by attackers through the exploitation of these flaws.

SearchSecurity reports "Apache Struts Vulnerabilities Allow Remote Code Execution, DoS"