Maven/org.apache.struts:struts-tiles CVE-2023-49735: high 7.5, EPSS 1.36%
Apache Tiles: Unvalidated input may lead to path traversal and XXE
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.3.0 | - | 1.3.10 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qw4h-3xjj-84cc#Maven/org.apache.struts:struts-tiles
- https://nvd.nist.gov/vuln/detail/CVE-2023-49735
- https://github.com/apache/tiles
- https://lists.apache.org/thread/8ktm4vxr6vvc1qsxh6ft8jzmom1zl65p
CVE-2023-49735 · published · modified · JSON