Apache Struts is a popular web application framework. There have been several Critical vulnerabilities (3 this year) being found across wide range of Struts versions. A new Apache Struts vulnerability was discovered and announced this week. All versions of struts 2.1-2.3 and 2.5-2.5.12 are vulnerable. The official Apache info is located here: https://struts.apache.org/docs/s2-052.html Could you pls confirm to me asap that Wireshark and all application(s) used by Wireshark are using Struts or not. If any of them are using Struts could you pls supply the version? Thanks asked 21 Sep '17, 05:04  profke |
One Answer:
Wireshark doesn't use Struts, it's entirely self-supporting. As to other applications that "use" Wireshark, (considering it's not a framework or server for others to build on), who knows. answered 21 Sep '17, 05:10  grahamb ♦ |
Thank you!