Article by a vulnerability of Apache Struts posted by JVN would be as follows:
・Operations that can be vulnerability components that are on the memory in JVN JVN#03188560 Apache Struts 1
・Brittleness about input value validation function in JVN JVN#65044642 Apache Struts 1
○ Of use product in the case of intra-mart BaseModule/WebPlatform/AppFramework
For the patch on the case please obtain it at the following URL.
Customers who do development using Struts framework is the target subject to the patch of this case in version listed below.
・intra-mart BaseModule Ver4.1 Ver4.2 Ver4.3 Ver5.0 Ver5.1
・intra-mart WebPlatform/AppFramework Ver6.0 Ver6.1 Ver7.0 Ver7.1 Ver7.2
※Ver.7.2 until patch09 will be the target. patch10 are included in this modified as standard.
Please refer to the following URL sharing information of that have been addressed requirements of patch10.
○ Of use product in the case of intra-mart AccelPlatform
Download the patch to be applied is can be mentioned for using IM-Juggling.
Please refer to "patch Application to Module" of intra-mart AccelPlatform Setup Guide for details.
Sharing information of requirements in this case would be the URL below.
※Append June 13, 2016
The vulnerability the URL below was released on the same day, it is confirmed that will not be impacted our standard products.