Struts 2 Development Mode Enabled

Severity: Medium

Invicti detected that the web application is running in Development Mode.

Struts 2 has a setting (which can be set to true or false in called devMode. When this setting is enabled, Struts 2 will provide additional logging and debug information, which can significantly speed up development.


When Struts is running in Development Mode it can expose sensitive data of your application.

Actions To Take#

Turn off Struts Development Mode by modifying your struts.xml file (or set devMode to false in the file)

<constant name="struts.devMode" value="false" />

Build your resistance to threats. And save hundreds of hours each month.

Get a demo See how it works