New Research Finds More Struts Vulnerabilities

guest · Aug 15, 2019

New Research Finds More Struts Vulnerabilities
August 15, 2019
https://www.darkreading.com/vulnera...ds-more-struts-vulnerabilities/d/d-id/1335530

Apache Struts continues to be a critical piece of software infrastructure for many organizations, and according to new research, it continues to be a deep well of vulnerabilities from which hackers can draw.

In a new report, Tim Mackey, principal security strategist at the Synopsys Cybersecurity Research Center, writes that the team investigated 115 separate Apache Struts releases and compared them with 57 security advisories covering 64 vulnerabilities. They found 61 additional Struts versions affected by at least one already disclosed vulnerability.

In addition, Mackey points out that an earlier report, the "2019 Open Source Security and Risk Analysis," showed that 43% of commercial software had vulnerabilities at least 10 years old — a reminder, he writes, that knowing about vulnerabilities is of little use if good patching and updating policies aren't followed.
Click to expand...

Review of Apache Struts vulnerabilities yields 24 updated advisories

Log in or Sign up

New Research Finds More Struts Vulnerabilities

guest Guest

Log in or Sign up

New Research Finds More Struts Vulnerabilities

guest Guest

Useful Searches