Updated: April 25, 2014
Affected
A security fix release fully addressing this issue is in preparation and will be released as soon as possible. Once the release is available, all Struts 2 users are strongly recommended to update their installations.
We are not aware of further vendor information regarding this vulnerability.