J2EE/Struts Action file/image upload management assistance needed aC Feb 28, 2009 Jump to latest Follow Reply ...

Apache recently reported finding a “file upload logic” flaw in versions 2.0.0 to 2.3.37, 2.5.0 to 2.5.33, and 6.0.0 to 6.3.0.2. Versions 6.4.0 and 7.0.0 were deemed safe. The bug is tracked as ...

The new Struts version also fixes a server path information leakage issue and adds improved input sanitizing for the file upload example.