Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Tiles

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-49735

    Apache Tiles: Unvalidated input may lead to path traversal and XXE

    ** UNSUPPORTED WHEN ASSIGNED ** The value set as the DefaultLocaleResolver.LOCALE_KEY attribute on the session was not validated while resolving XML definition files, leading to possible path traversal and eventually SSRF/XXE when passing user-controlled data…

    Apache Software Foundation Apache Tiles struts:struts tiles Debian Ubuntu Maven