WebWork 2.2.6 released (Security Fix)
Opensymphony and the WebWork team are proud to announce the release of
WebWork version 2.2.6.
This release, approximately 3 months after WebWork 2.2.5, is a
maintainance release, due to a critical security issue found in XWork,
allowing users to execute arbituary any OGNL expression. See here for more details
* Release Notes
* Changelog
* Download here
This release is backwords compatible with WebWork 2.2.5 and is a drop
in replacement.
We would like to thank both users and contributors of WebWork for
helping out, submiting patches, testing, providing feedback and
participating in various discussion.
The WebWork Development Team