CVE-2023-49735
3 advisories.
Maven/org.apache.tiles:tiles-core CVE-2023-49735: high 7.5
Apache Tiles: Unvalidated input may lead to path traversal and XXE
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qw4h-3xjj-84cc
- https://nvd.nist.gov/vuln/detail/CVE-2023-49735
- https://github.com/apache/tiles
- https://lists.apache.org/thread/8ktm4vxr6vvc1qsxh6ft8jzmom1zl65p
CVE-2023-49735 · published · modified · JSON
Maven/org.apache.struts:struts-tiles CVE-2023-49735: high 7.5
Apache Tiles: Unvalidated input may lead to path traversal and XXE
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.3.0 | - | 1.3.10 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qw4h-3xjj-84cc#Maven/org.apache.struts:struts-tiles
- https://nvd.nist.gov/vuln/detail/CVE-2023-49735
- https://github.com/apache/tiles
- https://lists.apache.org/thread/8ktm4vxr6vvc1qsxh6ft8jzmom1zl65p
CVE-2023-49735 · published · modified · JSON
Maven/struts:struts CVE-2023-49735: high 7.5
Apache Tiles: Unvalidated input may lead to path traversal and XXE
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1 | - | 1.2.9 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qw4h-3xjj-84cc#Maven/struts:struts
- https://nvd.nist.gov/vuln/detail/CVE-2023-49735
- https://github.com/apache/tiles
- https://lists.apache.org/thread/8ktm4vxr6vvc1qsxh6ft8jzmom1zl65p
CVE-2023-49735 · published · modified · JSON