DEBIAN-CVE-2023-49735

🗓️ 30 Nov 2023 22:15:09Reported by GoogleType

osv🔗 osv.dev👁 5 Views

DefaultLocaleResolver.LOCALE_KEY not validated, enabling path traversal and server side forgery in Apache Tiles 2+.

Reporter	Title	Published	Views	Family All 23
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts 1.1 Vulnerabilities in IBM Library Support for Struts	16 Jan 202609:15	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts 1.3.10 Vulnerabilities in IBM Library Support for Struts	16 Jan 202609:28	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts Vulnerabilities in IBM Library Support for Struts	13 Mar 202617:06	–	ibm
Circl	CVE-2023-49735	21 Dec 202315:11	–	circl
CNNVD	Apache Tiles Path Traversal Vulnerability	30 Nov 202300:00	–	cnnvd
CVE	CVE-2023-49735	30 Nov 202321:17	–	cve
Cvelist	CVE-2023-49735 Apache Tiles: Unvalidated input may lead to path traversal and XXE	30 Nov 202321:17	–	cvelist
Debian CVE	CVE-2023-49735	30 Nov 202321:17	–	debiancve
Github Security Blog	Apache Tiles: Unvalidated input may lead to path traversal and XXE	1 Dec 202300:31	–	github
Tenable Nessus	Atlassian Jira Service Management Data Center and Server 11.2.0 < 11.2.1 (JSDSERVER-16458)	6 Feb 202600:00	–	nessus