Struts 2 Development Mode Enabled

Severity: Medium
Summary#

Invicti detected that the web application is running in Development Mode.

Struts 2 has a setting (which can be set to true or false in default.properties) called devMode. When this setting is enabled, Struts 2 will provide additional logging and debug information, which can significantly speed up development.

Impact#

When Struts is running in Development Mode it can expose sensitive data of your application.

Actions To Take#

Turn off Struts Development Mode by modifying your struts.xml file (or set devMode to false in the default.properties file)

<constant name="struts.devMode" value="false" />

Build your resistance to threats. And save hundreds of hours each month.

Get a demo See how it works