Skip to content
OpenAdvisories

Package · Maven

org.apache.tapestry:tapestry-core

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2020-13953

    Improper file downloads in Apache Tapestry

    In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run.

    org.apache.tapestry:tapestry-core Maven