Skip to main content

Apache Releases Security Updates

Threat ID:
CC-3697
Threat Severity:
Information only
Published:
10 December 2020 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Affected platforms

The following platforms are known to be affected:

Versions: 2.0.0 to 2.5.25

Apache Struts 2

Threat details

Introduction

The Apache Software Foundation has released a security update to address a vulnerability in Apache Struts. A remote attacker could exploit this vulnerability to take control of an affected system.

Remediation advice

Organisations are encouraged to review Apache Security Bulletin S2-061 and Apache security advisory for CVE-2020-17530 and apply the necessary update or workaround.

Last edited: 15 December 2020 10:44 am