what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Lukasz Lenart

Apache Struts 2.3.20 Security Fixes

Posted Dec 8, 2014

Authored by Lukasz Lenart | Site struts.apache.org

Apache has released Struts version 2.3.20 which merges various security fixes and extends an existing security mechanism to block access to given Java packages and Classes.

tags | advisory, java

SHA-256 | 4edeb149fb5476c15913f77c9224f8266c491df7c2ab120e76888d96b6fcea29

Download | Favorite | View

Struts 2.3.16.3 Manipulation Fix

Posted May 6, 2014

Authored by Lukasz Lenart | Site struts.apache.org

Struts version 2.3.16.3 has been released to extend excluded params to avoid manipulation via the CookieInterceptor.

tags | advisory

SHA-256 | 748de2985bf1e534b05c23a1ad4db03041643d976022e32385f24f6ac7ed6d3a

Download | Favorite | View

Struts 2.3.16.2 GA Release

Posted Apr 27, 2014

Authored by Lukasz Lenart | Site struts.apache.org

Apache Struts version 2.3.16.2 GA has been released to address ClassLoader security vulnerabilities.

tags | advisory, vulnerability

SHA-256 | 1331886b3f8fd61bb499958c12f3d2ecbc179c9096709e2979167e1fcd693688

Download | Favorite | View