[Snyk] Upgrade org.apache.struts:struts2-core from 2.3.20 to 2.5.33

[nirw-snyk]

Snyk has created this PR to upgrade org.apache.struts:struts2-core from 2.3.20 to 2.5.33.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 47 versions ahead of your current version.

• The recommended version was released 2 years ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Denial of Service SNYK-JAVA-ORGAPACHESTRUTS-6100744	45	No Known Exploit
	Remote Code Execution (RCE) SNYK-JAVA-ORGAPACHESTRUTS-6102825	45	Mature
	Parameter Alteration SNYK-JAVA-ORGAPACHESTRUTSXWORK-30798	45	No Known Exploit
	Improper Input Validation SNYK-JAVA-ORGAPACHESTRUTSXWORK-30799	45	No Known Exploit
	Access Restriction Bypass SNYK-JAVA-ORGAPACHESTRUTSXWORK-30802	45	No Known Exploit
	Arbitrary Code Execution SNYK-JAVA-ORGAPACHESTRUTSXWORK-30803	45	No Known Exploit
	Command Injection SNYK-JAVA-ORGAPACHESTRUTSXWORK-451611	45	Mature
	Insecure Defaults SNYK-JAVA-ORGAPACHESTRUTSXWORK-474418	45	No Known Exploit
	Improper Input Validation SNYK-JAVA-ORGAPACHESTRUTSXWORK-5811864	45	No Known Exploit
	Server-side Template Injection (SSTI) SNYK-JAVA-ORGFREEMARKER-1076795	45	Proof of Concept
	Denial of Service (DoS) SNYK-JAVA-COMMONSFILEUPLOAD-30082	45	No Known Exploit
	Cross-site Request Forgery (CSRF) SNYK-JAVA-ORGAPACHESTRUTS-30774	45	No Known Exploit
	Access Restriction Bypass SNYK-JAVA-ORGAPACHESTRUTS-30775	45	No Known Exploit
	Access Restriction Bypass SNYK-JAVA-ORGAPACHESTRUTS-30776	45	No Known Exploit
	Arbitrary Command Execution SNYK-JAVA-ORGAPACHESTRUTS-31495	45	Mature
	Denial of Service (DoS) SNYK-JAVA-ORGAPACHESTRUTS-31500	45	No Known Exploit
	Denial of Service (DoS) SNYK-JAVA-ORGAPACHESTRUTS-31502	45	No Known Exploit
	Remote Code Execution SNYK-JAVA-ORGAPACHESTRUTS-32477	45	Mature
	Denial of Service (DoS) SNYK-JAVA-ORGAPACHESTRUTS-608098	45	Proof of Concept
	Unrestricted Upload of File with Dangerous Type SNYK-JAVA-ORGAPACHESTRUTS-609765	45	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JAVA-ORGAPACHESTRUTSXWORK-30800	45	No Known Exploit
	Improper Input Validation SNYK-JAVA-ORGAPACHESTRUTSXWORK-30801	45	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JAVA-ORGAPACHESTRUTSXWORK-30804	45	No Known Exploit
	Arbitrary Code Execution SNYK-JAVA-COMMONSFILEUPLOAD-30401	45	No Known Exploit
	Remote Code Execution (RCE) SNYK-JAVA-ORGAPACHESTRUTS-2635340	45	Proof of Concept
	Manipulation of Struts' internals SNYK-JAVA-ORGAPACHESTRUTS-30060	45	No Known Exploit
	Denial of Service (DoS) SNYK-JAVA-ORGAPACHESTRUTS-31501	45	No Known Exploit
	Information Exposure SNYK-JAVA-COMMONSFILEUPLOAD-31540	45	No Known Exploit
	Denial of Service (DoS) SNYK-JAVA-OGNL-30474	45	No Known Exploit
	Remote Code Execution (RCE) SNYK-JAVA-ORGAPACHESTRUTS-1049003	45	Mature
	Arbitrary Code Execution SNYK-JAVA-ORGAPACHESTRUTS-30207	45	Mature
	Command Injection SNYK-JAVA-ORGAPACHESTRUTS-30770	45	Mature
	Arbitrary Code Execution SNYK-JAVA-ORGAPACHESTRUTS-30771	45	No Known Exploit
	Arbitrary Command Execution SNYK-JAVA-ORGAPACHESTRUTS-30772	45	Mature
	Cross-site Scripting (XSS) SNYK-JAVA-ORGAPACHESTRUTS-30773	45	No Known Exploit
	Directory Traversal SNYK-JAVA-ORGAPACHESTRUTS-30778	45	No Known Exploit
	Arbitrary Code Execution SNYK-JAVA-ORGAPACHESTRUTS-31503	45	Mature
	Improper Action Name Cleanup SNYK-JAVA-ORGAPACHESTRUTS-451610	45	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JAVA-ORGAPACHESTRUTS-460223	45	No Known Exploit
	Allocation of Resources Without Limits or Throttling SNYK-JAVA-ORGAPACHESTRUTS-5707101	45	No Known Exploit
	Remote Code Execution (RCE) SNYK-JAVA-ORGAPACHESTRUTS-608097	45	Mature

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[nirw-snyk]

🎉 Snyk checks have passed. No issues have been found so far.

✅ code/snyk check is complete. No issues have been found. (View Details)