CVE-2013-4310 indicates the action prefix (action:) feature of struts2 framework is vulnerable. Hence the vendor released the patch(?) by disabling this feature. However, there is an option to enable this feature back.
Question: What are the security implications on the same (enabling this feature back). Is there any other measures that can be taken to mitigate the risks exposed by this vulnerability?