Critical vulnerability in the Open Source Framework "Apache Struts"

[Richard Ward]

In light of the recent critical vulnerability found with Apache Struts, is anybody able to advise if it is used within any of the JIRA based applications?

[Shannon S · Accepted solution]

Hi Richard,

Jira does not use Apache Struts and is thus unaffected.

You've also tagged Confluence on your question, so I wanted to let you know it uses Webwork 2, which predates struts and is also not affected.

I hope this is clear, but do let us know if you have any additional questions.

Kind Regards,
Shannon

[Richard Ward]

Thank you for the Confirmation.