Package · Maven

org.apache.tapestry:tapestry-project

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2020-17531 Public exploit

Deserialization flaw in EOL Tapestry 4.

A Java Serialization vulnerability was found in Apache Tapestry 4. Apache Tapestry 4 will attempt to deserialize the "sp" parameter even before invoking the page's validate method, leading to deserialization without authentication. Apache Tapestry 4 reached e…

Apache Software Foundation Apache Tapestry org.apache.tapestry:tapestry-project Maven

Dec 8, 2020