Product · Apache Software Foundation

Apache Tapestry

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical —

CVE-2021-27850 Public exploit EPSS 94%

Bypass of the fix for CVE-2019-0195

A critical unauthenticated remote code execution vulnerability was found all recent versions of Apache Tapestry. The affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. The vulnerability I have found is a bypass of the fix for CVE-2019-0195. Recap: Befor…

Apache Software Foundation Apache Tapestry org.apache.tapestry:tapestry-core Maven

Apr 15, 2021
Critical 9.8

CVE-2020-17531 Public exploit

Deserialization flaw in EOL Tapestry 4.

A Java Serialization vulnerability was found in Apache Tapestry 4. Apache Tapestry 4 will attempt to deserialize the "sp" parameter even before invoking the page's validate method, leading to deserialization without authentication. Apache Tapestry 4 reached e…

Apache Software Foundation Apache Tapestry org.apache.tapestry:tapestry-project Maven

Dec 8, 2020