Maven/org.apache.tapestry:tapestry-core CVE-2020-13953: medium 5.3, EPSS 2.65%
Improper file downloads in Apache Tapestry
Action: Upgrade org.apache.tapestry:tapestry-core to 5.6.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.4.0 | 5.6.0 | - |
Fixed versions
| 5.6.0 |
Sources
- osv: GHSA-w9mp-p2wp-2xf7
- https://nvd.nist.gov/vuln/detail/CVE-2020-13953
- https://lists.apache.org/thread.html/r37dab61fc7f7088d4311e7f995ef4117d58d86a675f0256caa6991eb@%3Cusers.tapestry.apache.org%3E
- https://lists.apache.org/thread.html/r50eb12e8a12074a9b7ed63cbab91d180d19cc23dc1da3ed5b6e1280f%40%3Cusers.tapestry.apache.org%3E
CVE-2020-13953 · published · modified · JSON