CVE-2021-30638 An Information Disclosure due to insufficient input validation exists in Apache Tapestry 5.4.0 and later

🗓️ 27 Apr 2021 18:30:15Reported by apacheType

Information disclosure vulnerability in Apache Tapestry 5.4.0 and late

Reporter	Title	Published	Views	Family All 15
CNNVD	Apache Tapestry 信息泄露漏洞	27 Apr 202100:00	–	cnnvd
CNVD	Apache Tapestry Information Disclosure Vulnerability	28 Apr 202100:00	–	cnvd
Check Point Advisories	Apache Tapestry Information Disclosure (CVE-2021-30638)	1 Jun 202100:00	–	checkpoint_advisories
CVE	CVE-2021-30638	27 Apr 202118:30	–	cve
EUVD	EUVD-2022-1426	3 Oct 202520:07	–	euvd
Github Security Blog	Information Exposure in Apache Tapestry	18 Mar 202217:53	–	github
NVD	CVE-2021-30638	27 Apr 202119:15	–	nvd
OSV	GHSA-GHM8-MMX7-XVG2 Information Exposure in Apache Tapestry	18 Mar 202217:53	–	osv
Prion	Information disclosure	27 Apr 202119:15	–	prion
Positive Technologies	PT-2021-18781 · Apache · Apache Tapestry	27 Apr 202100:00	–	ptsecurity

[
  {
    "product": "Apache Tapestry",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "Apache Tapestry 5.6.4",
        "status": "affected",
        "version": "Apache Tapestry",
        "versionType": "custom"
      },
      {
        "lessThan": "Apache Tapestry 5.7.2",
        "status": "affected",
        "version": "Apache Tapestry",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2021/04/27/3
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-491/
security	www.security.netapp.com/advisory/ntap-20210528-0004/
lists	www.lists.apache.org/thread.html/r37dab61fc7f7088d4311e7f995ef4117d58d86a675f0256caa6991eb%40%3Cusers.tapestry.apache.org%3E

28 May 2021 09:06Current

6.5Medium risk

Vulners AI Score6.5

EPSS0.06559

CWE-200