Is there a Spectrum Patch that addresses the following vulnerabilities:
Apache Struts: S2-064 (CVE-2023-34396): Security updates available for Apache Struts - Vulnerable software installed: Apache Struts 2.5.30 (/opt/CA/spectrum/tomcat/lib/struts2-core-2.5.30.jar)
Apache Struts: S2-063 (CVE-2023-34149): Security updates available for Apache Struts - Vulnerable software installed: Apache Struts 2.5.30 (/opt/CA/spectrum/tomcat/lib/struts2-core-2.5.30.jar)
Release : 22.2
Spectrum 22.2.11 is vulnerable. We are using the Apache Struts 2.5.30.
These vulnerabilities will be addressed in the 23.3.1 release of Spectrum.