In breve
- CVE-2009-1275 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda org.apache.tiles:tiles-core, tiles (apache).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.8%, superiore al 86.5% delle vulnerabilità.
- Correzione: aggiornare a 2.1.2 o successiva.
Description
Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information via unspecified vectors, related to the (1) tiles:putAttribute and (2) tiles:insertTemplate JSP tags.
NVD description
Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information via unspecified vectors, related to the (1) tiles:putAttribute and (2) tiles:insertTemplate JSP tags.
Altre vulnerabilità di org.apache.tiles:tiles-core
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free