Security Patch Released in Core of Apache Struts 2 web app development framework. Apache Software Foundation issues security bulletin to fix critical remote code execution vulnerability. The bug is the result of improper validation of trusted user data in the core of Struts. The vulnerability is similar to the Equifax data breach that was exploited in the infamous Equifax breach. Apache software Foundation releases fixed versions of 2.3.35 and 2.5.17.16 today to fix the bug today, with the release of fixed versions 2.1.3 through 2.4.34.”]
Source: https://hackercombat.com/security-patch-released-in-core-of-apache-struts/