Apache security advisory (AV24-708)

Serial number: AV24-708
Date: December 11, 2024

On November 26, 2024, Apache published a security advisory to address a critical vulnerability (CVE-2024-53677) in the following products:

• Apache Struts – versions 2.0.0 to 2.3.37 (EOL)
• Apache Struts – versions 2.5.0 to 2.5.33
• Apache Struts – versions 6.0.0 to 6.3.0.2

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Apache Security Bulletin S2-067
• Apache Security Bulletins