This is an update of the recently announced Security Bulletin S2-049 - http://struts.apache.org/docs/s2-049.html The bulletin was extended with an additional information when the potential vulnerability can be present in your application. Please re-read the mentioned bulletin and apply required actions if needed. Please report any problems back to the Struts Security mailing list - security@xxxxxxxxxxxxxxxxx Kind regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/