Apache Struts Statement on Equifax Security Breach

Struts was the in-vogue technology back when I last had Java as the focus of my full-time job (as opposed to taking over the maintenance of colleagues' projects), which was 2005 or thereabouts. Managers would seemingly gladly throw money at shareware-quality add-ons to "help" with Struts application development (in Eclipse, of course) rather than pay for well-maintained Free Software, such was the nature of the Java ecosystem at that point.

Given that other technologies stole Java's thunder in many regards, and that things like Maven didn't come along (or not with any force) until later, and that inertia would prevent the introduction of update strategies in environments where things like Struts have been used, I wouldn't want to think about how many applications there are that are vulnerable. It also doesn't help that things like Tomcat and Jetty are regulars on the vulnerability calendar, either.

Struts was the Rails / Django equivalent when Java was sexy and everyone was building Service Oriented Architectures back in the early to mid 2000s.

In fact, the name Ruby on Rails was a play on Java/Struts, Rails being a faster kind of strut.