[German]Oracle has just closed critical vulnerabilities in its Apache Struts 2 framework. A vulneraby CVE-2017-9805 in Struts version 2.5 – 2.5.12 had become known a few weeks ago. Version 2.5.13 doesn't contain this vulnerability. Oracle has released this document dealing with an update for Apache Struts 2 and recommends to update related versions immediately.
Advertising