Skip to Content.
Sympa Menu

grouper-users - [grouper-users] RE: Struts exploit?

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] RE: Struts exploit?

Chronological Thread 
  • From: Chris Hyzer <>
  • To: "Bryan E. Wooten" <>, "" <>
  • Subject: [grouper-users] RE: Struts exploit?
  • Date: Mon, 28 Apr 2014 18:23:24 +0000
  • Accept-language: en-US

We don’t use struts 2.  In Grouper 2.3 hopefully we wont use struts anymore at all…


From: [mailto:] On Behalf Of Bryan E. Wooten
Sent: Monday, April 28, 2014 2:21 PM
Subject: [grouper-users] Struts exploit?


So we get an email from our CISO about this:


“24 April 2014 - Struts up to Zero-Day Exploit Mitigation

In Struts, an issue with ClassLoader manipulation via request parameters was supposed to be resolved. Unfortunately, the correction wasn't sufficient.

A security fix release fully addressing this issue is in preparation and will be released as soon as possible.

Once the release is available, all Struts 2 users are strongly recommended to update their installations.”

I see that Grouper UI uses Struts. Is this an issue I need to worry about?




Archive powered by MHonArc 2.6.16.

Top of Page