Zip files have been created and can be download from the Avada Software Customer Support portal to correct the opened CVEs:
CVE-2024-50379 and CVe-2024-56337 (Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability)
And CVE-2024-53667 (Apache Struts 6.3.0.2 Path Traversal Vulnerability)
along with some related jars. ...
Continue reading