Skip to content
OpenAdvisories

Package · Debian

tiles

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2009-1275

    Apache Tiles Vulnerable to XSS via EL Expression Injection

    Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive informat…

    org.apache.tiles:tiles-core tiles Debian Maven