CVE-2026-61899

Mô tả

Tham khảo

• lists.apache.org/thread/6j3yojqrdsxkrfz52d0zjyrf5n9xttmw · Vendor Advisory
• openwall.com/lists/oss-security/2026/08/08/2 · Mailing List

Lỗ hổng khác của tapestry

• CVE-2022-46366NGHIÊM TRỌNG 9.8Apache Tapestry 3.x allows deserialization of untrusted data, leading to remote code execution. This issue is similar to but distinct from C…
• CVE-2022-31781CAO 7.5Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles Content Types. Speci…
• CVE-2021-30638CAO 7.5Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using…
• CVE-2021-27850NGHIÊM TRỌNG 9.8A critical unauthenticated remote code execution vulnerability was found all recent versions of Apache Tapestry. The affected versions inclu…
• CVE-2020-17531NGHIÊM TRỌNG 9.8A Java Serialization vulnerability was found in Apache Tapestry 4. Apache Tapestry 4 will attempt to deserialize the "sp" parameter even bef…