GHSA-2C6Q-RGVJ-66RX Apache Tiles Vulnerable to XSS via EL Expression Injection

Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language EL expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting XSS attacks or obtain sensitive information via unspecified vectors, related to th...

PT-2020-20572

Name of the Vulnerable Software and Affected Versions Netflix Titus versions prior to v0.1.1-rc.274 Description The issue concerns the use of Java Bean Validation custom constraint validators in Netflix Titus. It allows for the injection of arbitrary data into error message templates, which can...

PT-2018-2617

Name of the Vulnerable Software and Affected Versions JBoss RichFaces versions 3.1.0 through 3.3.4 Description The issue allows unauthenticated remote attackers to inject expression language EL expressions and execute arbitrary Java code via a /DATA/ substring in a path with an...

PT-2017-5003

Name of the Vulnerable Software and Affected Versions: Apache MyFaces Core versions 2.0.1 through 2.0.10 Apache MyFaces Core versions 2.1.0 through 2.1.4 Description: The issue allows remote attackers to inject EL expressions via crafted parameters, potentially leading to information disclosure...