CVE-2014-1972
22.08.2015, 23:59
Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | tapestry | 𝑥 ≤ 5.3.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References