Apache Struts2 vulnerability and future ISE patches

[Arne Bier]

Quick question: will all future ISE patches contain the Struts2 fix that is currently available on CCO? e.g. when ISE 2.4 patch 3 is released, will we need to still apply this Struts2 patch as well, or will it be integrated into patch 3.

thanks

[Francesco Molino · Accepted solution]

Hi
Usually new patches are not included in released patches but will be added in the next one.
I believe it'll will be the same for this one unless they decide to do a retrofit