STRUTS2 s2-029 Remote Code Execution vulnerability

Struts2 as a widely used web framework, security issues continue to emerge. In order to ensure security, in the business process should not trust the user to submit any data, do a good job of security filtering. It is best to add a filter blacklist to the OGNL execution portal and update struts to 2.3.25 (not released) in a timely manner.

STRUTS2 official website released the latest 2.5beta, unable to download to 2.3.25. Maven cannot find resources, but it can be https://repository.apache.org/content/groups/staging

STRUTS2 s2-029 Remote Code Execution vulnerability