Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tiles/tiles-core@2.1
purl pkg:maven/org.apache.tiles/tiles-core@2.1
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-eury-mu1z-w3bp
Aliases:
CVE-2009-1275
GHSA-2c6q-rgvj-66rx
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information via unspecified vectors, related to the (1) tiles:putAttribute and (2) tiles:insertTemplate JSP tags.
2.1.2
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T16:00:37.623652+00:00 GHSA Importer Affected by VCID-eury-mu1z-w3bp https://github.com/advisories/GHSA-2c6q-rgvj-66rx 38.0.0
2026-04-01T12:49:59.942170+00:00 GitLab Importer Affected by VCID-eury-mu1z-w3bp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tiles/tiles-core/CVE-2009-1275.yml 38.0.0