struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Lukasz Lenart <>
Subject [ANN] A crafted XML request can be used to perform a DoS attack when using the Struts REST plugin
Date Tue, 27 Mar 2018 10:16:58 GMT
The Apache Security Struts Team recommends to immediately upgrade your
Struts 2 based projects to use the latest released version of the
Apache Struts. This is necessary to prevent your publicly accessible
web site, which is using the Struts REST plugin and performing XML
serialisation, from being exposed to possible DoS attack.

You can find more details in a Security Bulletin S2-056 -

All developers are strongly advised to perform this action.

Kind regards
+ 48 606 323 122

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message