These are the notes for the Struts 184.108.40.206 distribution.
For prior notes in this release series, see Version Notes 2.5.14
- If you are a Maven user, you might want to get started using the Maven Archetype.
You can also use Struts Archetype Catalog like below
- A crafted JSON request can be used to perform a DoS attack when using the Struts REST plugin, see S2-054
- Vulnerability in the Jackson JSON library, see S2-055
- [WW-4892] - Use Jackson handler to handle JSON by default
- [WW-4893] - Upgrade Jackson to version 2.9.2