Looking for the vulnerability index of Invicti's legacy products?
Struts2 Development Mode Enabled - Vulnerability Database

Struts2 Development Mode Enabled

Description

This Struts web application is running in Development Mode. Struts 2 has a setting (which can be set to true or false in default.properties) called devMode (= development mode). When this setting is enabled, Struts 2 will provide additional logging and debug information, which can significantly speed up development. Please turn this option off before deploying application to a production environment - it can expose sensitive data of your application!

Remediation

Turn off Struts Development Mode by modifying your <strong>struts.xml</strong> file (or set <strong>devMode</strong> to <strong>false</strong> in the file <strong>default.properties</strong>): <pre> &lt;constant name=&quot;struts.devMode&quot; value=&quot;false&quot; /&gt; </pre>

Related Vulnerabilities