Struts 2 Development Mode Enabled
Severity:
Medium
Summary
Invicti detected that the web application is running in Development Mode.
Struts 2 has a setting (which can be set to true or false in default.properties) called devMode. When this setting is enabled, Struts 2 will provide additional logging and debug information, which can significantly speed up development.
Impact
When Struts is running in Development Mode it can expose sensitive data of your application.
Remediation
Required Skills for Successful Exploitation
Actions To Take
Turn off Struts Development Mode by modifying your struts.xml file (or set devMode to false in the default.properties file)
<constant name="struts.devMode" value="false" />
Classifications
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Featured resources
Build your resistance to threats. And save hundreds of hours each month.
