In breve
- CVE-2014-1972 è una vulnerabilità ALTO (CVSS 7.8) che riguarda org.apache.tapestry:tapestry-core, tapestry (apache).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 9.6%, superiore al 95.5% delle vulnerabilità.
- Correzione: aggiornare a 5.3.6 o successiva.
Description
Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.
NVD description
Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.
Altre vulnerabilità di org.apache.tapestry:tapestry-core
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free