Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-5240

Upgrade Struts with CVE-2018-11776 fixed

XMLWordPrintable

      On August 22, the Apache Software Foundation announced a remote code execution vulnerability in Struts, called CVE-2018-11776. After investigating, we have determined that Crowd is not affected by this vulnerability. While Crowd do use Struts, it is not configured in a way that would leave it susceptible to this bug. However, as an extra precaution that is in-line with industry best practices, we are updating Struts in Crowd to the latest version.

            [CWD-5240] Upgrade Struts with CVE-2018-11776 fixed

            No work has yet been logged on this issue.

              Unassigned Unassigned
              hbalasundaram hari
              Affected customers:
              0 This affects my team
              Watchers:
              10 Start watching this issue

                Created:
                Updated:
                Resolved: