Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2014-1972

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-c438-8cvq-pxxx

Apache Tapestry Unsafe Object Storage Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.

gitlab/maven/org.apache.tapestry/tapestry-core/CVE-2014-1972

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.