How a serious Apache vulnerability struts its stuff Posted on March 15, 2017 by Simon Steed Officially it’s CVE-2017-5638, but in practice it’s “the bug in Apache Struts you really should have patched by now”. Here’s why…