Re: redirect vulnerability after upgrading to Struts 2.3.16.2

2014-07-17 Thread Lukasz Lenart
2014-07-17 14:24 GMT+02:00 saikrishna : > I contacted middle ware team,who does server restart.Server is getting > restarted daily ! Actually,one month back we have done the struts upgrade to > 2.3.16.2.As a part of that,we have just updated our pom.xml with the struts > version ,as our project is

Re: redirect vulnerability after upgrading to Struts 2.3.16.2

2014-07-17 Thread saikrishna
Lukasz Lenart apache.org> writes: > > 2014-07-17 12:30 GMT+02:00 saikrishna gmail.com>: > > production servers are handled by some other team.You want me to recycle the > > servers once ? > > Yes, you should do it as soon as possible - after switching devMode to > off you must restart applica

Re: redirect vulnerability after upgrading to Struts 2.3.16.2

2014-07-17 Thread Lukasz Lenart
2014-07-17 12:30 GMT+02:00 saikrishna : > production servers are handled by some other team.You want me to recycle the > servers once ? Yes, you should do it as soon as possible - after switching devMode to off you must restart application to take effect And as I said, you are using safe version,

Re: redirect vulnerability after upgrading to Struts 2.3.16.2

2014-07-17 Thread saikrishna
Lukasz Lenart apache.org> writes: > > 2014-07-17 12:26 GMT+02:00 saikrishna gmail.com>: > > Even though dev mode is set to false,we are getting errors as above asking us > > to set devmode to false,which is already there. > > > > and both entries are taken from production logs. > > Have you r

Re: redirect vulnerability after upgrading to Struts 2.3.16.2

2014-07-17 Thread Lukasz Lenart
2014-07-17 12:26 GMT+02:00 saikrishna : > Even though dev mode is set to false,we are getting errors as above asking us > to set devmode to false,which is already there. > > and both entries are taken from production logs. Have you restarted the app? Regards -- Łukasz + 48 606 323 122 http://ww

Re: redirect vulnerability after upgrading to Struts 2.3.16.2

2014-07-17 Thread saikrishna
Lukasz Lenart apache.org> writes: > > 2014-07-17 12:17 GMT+02:00 saikrishna gmail.com>: > > Sorry,this is an issue from production,where already dev mode is set to false > > in the config files. > > Log entry is from production. > > Which one? Both entries have "Developer Notification (set >

Re: redirect vulnerability after upgrading to Struts 2.3.16.2

2014-07-17 Thread Lukasz Lenart
2014-07-17 12:17 GMT+02:00 saikrishna : > Sorry,this is an issue from production,where already dev mode is set to false > in the config files. > Log entry is from production. Which one? Both entries have "Developer Notification (set struts.devMode to false to disable this message" Regards -- Łu

Re: redirect vulnerability after upgrading to Struts 2.3.16.2

2014-07-17 Thread saikrishna
Lukasz Lenart apache.org> writes: > > 2014-07-17 11:31 GMT+02:00 saikrishna gmail.com>: > > 2014-04-18 05:23:12,320 ERROR ParametersInterceptor:34 - Developer > > Notification (set struts.devMode to false to disable this message): > > Unexpected Exception caught setting > > 'redirect:${#a=#con

Re: redirect vulnerability after upgrading to Struts 2.3.16.2

2014-07-17 Thread Lukasz Lenart
2014-07-17 11:31 GMT+02:00 saikrishna : > 2014-04-18 05:23:12,320 ERROR ParametersInterceptor:34 - Developer > Notification (set struts.devMode to false to disable this message): > Unexpected Exception caught setting > 'redirect:${#a=#context.get('com.opensymphony.xwork2.dispatcher.HttpServletR > e

Re: redirect vulnerability after upgrading to Struts 2.3.16.2

2014-07-17 Thread saikrishna
Lukasz Lenart apache.org> writes: > > 2014-07-17 11:15 GMT+02:00 saikrishna gmail.com>: > > > > > > > > Lukasz Lenart apache.org> writes: > > > >> > >> This vulnerability was resolved in 2.3.15.1, more details here > >> http://struts.apache.org/release/2.3.x/docs/s2-017.html > >> > >> For sure

Re: redirect vulnerability after upgrading to Struts 2.3.16.2

2014-07-17 Thread Lukasz Lenart
2014-07-17 11:15 GMT+02:00 saikrishna : > > > > Lukasz Lenart apache.org> writes: > >> >> This vulnerability was resolved in 2.3.15.1, more details here >> http://struts.apache.org/release/2.3.x/docs/s2-017.html >> >> For sure you must switch off devMode in production, thus has large >> impact on

Re: redirect vulnerability after upgrading to Struts 2.3.16.2

2014-07-17 Thread saikrishna
Lukasz Lenart apache.org> writes: > > This vulnerability was resolved in 2.3.15.1, more details here > http://struts.apache.org/release/2.3.x/docs/s2-017.html > > For sure you must switch off devMode in production, thus has large > impact on overall application performance > > 2014-07-16 17

Re: redirect vulnerability after upgrading to Struts 2.3.16.2

2014-07-16 Thread Lukasz Lenart
This vulnerability was resolved in 2.3.15.1, more details here http://struts.apache.org/release/2.3.x/docs/s2-017.html For sure you must switch off devMode in production, thus has large impact on overall application performance 2014-07-16 17:28 GMT+02:00 saikrishna : > Hi Getting the below error.