DHIS2 Developers and Community: I wanted to check if DHIS2 (specifically Version: 2.25 that includes the March 2017 patch for CVE-2017-5638) is vulnerable to the newly identified Struts exploit - CVE-2017-9805?
More information available via these links: https://nakedsecurity.sophos.com/2017/09/06/apache-struts-serialisation-vulnerability-what-you-need-to-know/ and https://struts.apache.org/docs/s2-052.html As always, thanks for your prompt response and support of DHIS2! -Stephen
_______________________________________________ Mailing list: https://launchpad.net/~dhis2-devs Post to : dhis2-devs@lists.launchpad.net Unsubscribe : https://launchpad.net/~dhis2-devs More help : https://help.launchpad.net/ListHelp
