Hello,
 
    I was wondering if someone could help me out with the Struts 2.2.1 
dependency list.  It looks like struts 2.2.1 depends on XWork 2.1.6.  However 
the release notes for Strtus 2.2.1 recommend using XWork 2.2.0.  I couldn't 
find XWork 2.2.0 but could find XWork 2.2.1.
 
   Is it recommended to upgrade to XWork 2.2.1 and Ognl 3.0 to fix the critical 
XWork vulnerability fixed in Stuts 2.2.1?
 
Thanks in advance for the help.
-Nate

Reply via email to