how to looking for the apache struts with the confluence?

Question

my confluence version is 6.3.3 and i see the apache struts 2.3.32 have a bug with

Remote code execution and i don't know how to looking for my confluence apache struts version and how to update the struts ?

anybody to say how to looking for the apache struts in the confluence ?

and how to update the struts ?

my confluence environment is Centos 7

thanks

Justin Roysdon · Answer

For newer versions of confluence (after 8.0) you can find this on your server using this command:

{code}

find / -name \*struts*.jar

{code}

Shannon S · Answer

Hi Kevin,

It appears that Confluence is not affected by this issue since it uses webwork 2, which predates Struts 2:

* CONFSERVER-53435

I hope this helps. Let us know if you have any questions.

Kind Regards,
Shannon