The developers of the popular Apache Struts development framework for Java-based web applications have fixed a critical vulnerability that could be exploited to compromise servers. The vulnerability, tracked as CVE-2017-9805, was discovered by researchers from software engineering analytics firm Semmle and is located in the popular REST plugin for Struts version 2.

Read full news article on The New Stack