Apache Struts is a free, open source framework that follows the MVC architecture and is used to develop Java-based web applications. It uses the Java Servlet API. It was originally created by Craig McClanahan and was donated to the Apache Foundation in May 2000. The first full release of Apache Struts 2 took place in 2007.

In this section, we will look at a few vulnerabilities that have been discovered in Apache Struts.