Skip to Content.
Sympa Menu

grouper-users - [grouper-users] Struts exploit?

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] Struts exploit?

Chronological Thread 
  • From: "Bryan E. Wooten" <>
  • To: "" <>
  • Subject: [grouper-users] Struts exploit?
  • Date: Mon, 28 Apr 2014 18:21:19 +0000
  • Accept-language: en-US

So we get an email from our CISO about this:


“24 April 2014 - Struts up to Zero-Day Exploit Mitigation

In Struts, an issue with ClassLoader manipulation via request parameters was supposed to be resolved. Unfortunately, the correction wasn't sufficient.

A security fix release fully addressing this issue is in preparation and will be released as soon as possible.

Once the release is available, all Struts 2 users are strongly recommended to update their installations.”

I see that Grouper UI uses Struts. Is this an issue I need to worry about?




Archive powered by MHonArc 2.6.16.

Top of Page