[
https://issues.apache.org/jira/browse/VELTOOLS-163?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sergiu Dumitriu reopened VELTOOLS-163:
--------------------------------------
> Apache Struts Vulnerabilities - Velocity Tool (2.0)
> ---------------------------------------------------
>
> Key: VELTOOLS-163
> URL: https://issues.apache.org/jira/browse/VELTOOLS-163
> Project: Velocity Tools
> Issue Type: Bug
> Components: VelocityStruts
> Reporter: Pankaj Singh
> Assignee: Claude Brisson
> Priority: Critical
>
> Velocity Tools version 2.0 uses struts 1.3.8 which has associated
> vulnerabilities:
> Struts 1
> • CVE-2014-0114 –
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0114
> Strut 2
> • CVE-2014-0113 –
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0113
> • CVE-2014-0112 -
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0112
> • CVE-2014-0094 -
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0094
> The desired remediation goal for all affected applications is to update the
> respective Apache Struts component to version 2.3.16.3.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
