Question about Struts 2 vulnerability

[Nate Klingenstein]

Joy,

I believe Shibboleth as distributed does not use Struts, so your deployment won't unless you've added something that uses Struts yourself.

Thanks,
Nate.

On Aug 5, 2013, at 19:18 , Joy Veronneau wrote:

> I was asked to determine whether Shibboleth uses Struts 2 with respect to this advisory about a vulnerability in Struts2:
> 
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-2251
> 
> I didn't see this vulnerability listed on the Shibboleth website but again, asked to make sure.
> 
> Thanks,
> 
> Joy
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net