Hi, Can anyone confirm/deny if Struts 1 is vulnerable to this problem? Thanks, Andy.