A critical vulnerability has been found in Apache Struts 2 with a PoC for the flaw having been published on the internet. The flaw was patched by the Apache Software Foundation and tracked as CVE-2o18-11776.