Description

This Struts web application is running in Development Mode. Struts 2 has a setting (which can be set to true or false in default.properties) called devMode (= development mode). When this setting is enabled, Struts 2 will provide additional logging and debug information, which can significantly speed up development. Please turn this option off before deploying application to a production environment - it can expose sensitive data of your application!

Remediation

Turn off Struts Development Mode by modifying your struts.xml file (or set devMode to false in the file default.properties):

<constant name="struts.devMode" value="false" />

References

Related Vulnerabilities