I just learned that Desktop Central still uses Apache Struts version 1.3. This version is out-of-date and is no longer being developed (https://struts.apache.org/struts1eol-announcement.html). In this article it clearly says that there won't be any further fixes for this version, even if major security problems or serious bugs are found.

Considering how often critical vulnerabilities are reported for Apache Struts, why is this version still used in Desktop Central? What are the plans to upgrade this to a version which is actively supported?

Regards

Stefan