Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-30638

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-ghm8-mmx7-xvg2

Information Exposure in Apache Tapestry Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953. This issue affects Apache Tapestry Apache Tapestry 5.4.0 version to Apache Tapestry 5.6.3; Apache Tapestry 5.7.0 version and Apache Tapestry 5.7.1.

gitlab/maven/org.apache.tapestry/tapestry-core/CVE-2021-30638

Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953.