Apache Struts web framework has a critical vulnerability that could be exploited by attackers to take full control of the application. The vulnerability has been assigned CVE-2018-11776 (S2-057), is exposed on servers running Struts under certain configurations and can be triggered by visiting a specially crafted URL. Security experts say all users of all versions of Struts should install the patch as quickly as possible. Struts, of course, was the software tied to the massive breach of Equifax in March 2017.”]
Source: https://www.inforisktoday.com/apache-issues-emergency-struts-patch-to-fix-critical-flaw-a-11412