As Apache notes: "Using the old File Upload mechanism keeps you vulnerable to this attack." Despite web app developers often opting for different frameworks nowadays, Struts 2 remains widely popular.

A critical vulnerability in the Apache Struts 2 application framework is now under active exploitation, security researchers have warned, urging users to apply the patch or run the latest version ...