how to looking for the apache struts with the confluence?

[Kevin Ye]

my confluence version is 6.3.3 and i see the apache struts 2.3.32 have a bug with

Remote code execution and i don't know how to looking for my confluence apache struts version and how to update the struts ?

anybody to say how to looking for the apache struts in the confluence ?

and how to update the struts ?

my confluence environment is Centos 7

 thanks

[Justin Roysdon]

For newer versions of confluence (after 8.0) you can find this on your server using this command:

{code}

find / -name \*struts*.jar

{code}

[Shannon S]

Hi Kevin,

It appears that Confluence is not affected by this issue since it uses webwork 2, which predates Struts 2:

• CONFSERVER-53435

I hope this helps. Let us know if you have any questions.

Kind Regards,
Shannon