CVE-2014-1972
EUVD-2022-349622.08.2015, 23:59
Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | tapestry | 𝑥 ≤ 5.3.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References