Apache Struts

<p>Apache Struts 2 is an <a href="/facts/Open-source_software/HzTaB8E9">open-source</a> <a href="/facts/Web_application_framework/8f1CVHDX">web application framework</a> for developing <a href="/facts/Java_EE/7AAStd35">Java EE</a> <a href="/facts/Web_application/BLkF3BIN">web applications</a>. It uses and extends the <a href="/facts/Java_Servlet/hf5LQVq1">Java Servlet</a> <a href="/facts/Application_programming_interface/GMlN4vUr">API</a> to encourage developers to adopt a <a href="/facts/Model%25E2%2580%2593view%25E2%2580%2593controller/vRbMXjMm">model–view–controller</a> (MVC) architecture. The WebWork framework spun off from <a href="/facts/Apache_Struts_1/uDjeFjyC">Apache Struts 1</a> aiming to offer enhancements and refinements while retaining the same general architecture of the original Struts framework. In December 2005, it was announced that WebWork 2.2 was adopted as Apache Struts 2, which reached its first full release in February 2007.
</p><p>Struts 2 has a history of critical security bugs, many tied to its use of <a href="/facts/OGNL/VmALLXdQ">OGNL</a> technology; some vulnerabilities can lead to <a href="/facts/Arbitrary_code_execution/zwnFfLRw">arbitrary code execution</a>. In October 2017, it was reported that failure by <a href="/facts/Equifax/a7Wykshk">Equifax</a> to address a Struts 2 vulnerability advised in March 2017 was later exploited in the <a href="/facts/Data_breach/xGxRFY1A">data breach</a> that was <a href="/facts/2017_Equifax_data_breach/C4ebf3Wj">disclosed by Equifax in September 2017</a>.
</p>

Apache Struts open-in-new

Apache Struts