Critical Apache Struts 2 Vulnerability Allow Attackers to Steal Sensitive Data

**Apache Struts 2 XXE Vulnerability (CVE-2025-68493):** A critical XML External Entity injection flaw in the XWork component of Apache Struts 2 affects multiple version ranges (2.0.0–2.3.37, 2.5.0–2.5.33, 6.0.0–6.1.0); successful exploitation can lead to data disclosure, SSRF and DoS. Apache released Struts 6.1.1 as the fixed version and organizations are advised to upgrade immediately or apply temporary mitigations (custom SAXParserFactory or JVM properties disabling external entities).