Grouper Users - Open Discussion List

[Chris Hyzer <>]

We use Struts 1.2.4 in the admin UI, so generally we look ok for the recent struts vulnerabilities…  hopefully in 2.3 or 2.4 we will have replaced the struts UI…

 

Thanks,

Chris

 

From: [mailto:] On Behalf Of Gary Chapman
Sent: Sunday, July 28, 2013 7:55 PM
To:
Subject: [grouper-users] Grouper and Apache Struts

 

There are recently identified security issues with Apache Struts v2.0.0+ -- we are surveying our applications looking for use of Struts:

 

  http://www.cvedetails.com/vulnerability-list/vendor_id-45/product_id-6117/Apache-Struts.html

 

Does Grouper use Struts?

 

Thanks - Gary Chapman, NYU