g0w6y commented on PR #1690: URL: https://github.com/apache/struts/pull/1690#issuecomment-4485646650
Thanks for considering the CVE request. On further reflection, I agree this bug's severity may not warrant one given the limited real-world exploitability. I mainly wanted to raise the regression in case it posed a risk I hadn't fully appreciated. If you feel a CVE isn't needed here, I'm fine deferring to your judgment. The important thing is it's fixed now. Thanks again for the quick merge and feedback! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
