system
Identify the affected product in <CVE-2017-5638>.
user
Which product is affected by <CVE-2017-5638>?
assistant
The affected product is Apache Struts and version: 2.3.x before 2.3.32, 2.5.x before 2.5.10.1.