how to looking for the apache struts with the confluence?

my confluence version is 6.3.3 and i see the apache struts 2.3.32 have a bug with

Remote code execution and i don't know how to looking for my confluence apache struts version and how to update the struts ?

anybody to say how to looking for the apache struts in the confluence ?

and how to update the struts ?

my confluence environment is Centos 7

thanks

2 answers

0 votes

For newer versions of confluence (after 8.0) you can find this on your server using this command:

{code}

find / -name \*struts*.jar

{code}

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

0 votes

Hi Kevin,

It appears that Confluence is not affected by this issue since it uses webwork 2, which predates Struts 2:

I hope this helps. Let us know if you have any questions.

Kind Regards,
Shannon

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.