TTCSIRT-180.111318: TT-CSIRT Advisory – Apache Security Updates

Apache has released a security update stating that all web applications using Apache Struts be upgraded to ver 2.3.36 as previous versions are vulnerable to Remote Code Execution attackers from attackers.

This vulnerability is due to commons-fileupload jar file having a flaw where it can be replaced with a malicious file if an attacker is able to get access to it.