Summary
Acunetix 360 detected that the web application is running in Development Mode.
Struts 2 has a setting (which can be set to true
or false
in default.properties
) called devMode
. When this setting is enabled, Struts 2 will provide additional logging and debug information, which can significantly speed up development.
Impact
When Struts is running in Development Mode it can expose sensitive data of your application.
Actions To Take
Turn off Struts Development Mode by modifying your struts.xml file (or set devMode
to false in the default.properties
file)
<constant name="struts.devMode" value="false" />