br.com.arsmachina:tapestry-url-rewriter (>=1.0.1, <=2.0.0), com.adaptrex:adaptrex-core (>=0.9.11, <=1.0-alpha3) +74 more potentially affected by CVE-2014-1972 via org.apache.tapestry:tapestry-core (>=5.0.3, <=5.3.5)

org.apache.tapestry:tapestry-core MAVEN version =5.0.3, =1.0.1, =0.9.11, =1.0.4, =0.1.1, =0.8.6, =0.8.6, =0.9, =0.8.9, =0.8.9, =0.3, =3.0.2, =0.9, =3.0.1, =3.2.1 - com.jexbox.connector:jexbox-tapestry 0.0.1 - com.joshcanfield:tapestry-monitoring 1.0.1 and more Source cves: CVE-2014-1972 Source...

br.com.arsmachina:tapestry-url-rewriter (>=1.0.1, <=2.0.0), com.adaptrex:adaptrex-core (>=0.9.11, <=1.0-alpha3) +74 more potentially affected by CVE-2014-1972 via org.apache.tapestry:tapestry-core (>=5.0.3, <=5.3.5)

org.apache.tapestry:tapestry-core MAVEN version =5.0.3, =1.0.1, =0.9.11, =1.0.4, =0.1.1, =0.8.6, =0.8.6, =0.9, =0.8.9, =0.8.9, =0.3, =3.0.2, =0.9, =3.0.1, =3.2.1 - com.jexbox.connector:jexbox-tapestry 0.0.1 - com.joshcanfield:tapestry-monitoring 1.0.1 and more Source cves: CVE-2014-1972 Source...

br.com.arsmachina:tapestry-url-rewriter (>=1.0.1, <=2.0.0), com.adaptrex:adaptrex-core (>=0.9.11, <=1.0-alpha3) +74 more potentially affected by CVE-2014-1972 via org.apache.tapestry:tapestry-core (>=5.0.3, <=5.3.5)

org.apache.tapestry:tapestry-core MAVEN version =5.0.3, =1.0.1, =0.9.11, =1.0.4, =0.1.1, =0.8.6, =0.8.6, =0.9, =0.8.9, =0.8.9, =0.3, =3.0.2, =0.9, =3.0.1, =3.2.1 - com.jexbox.connector:jexbox-tapestry 0.0.1 - com.joshcanfield:tapestry-monitoring 1.0.1 and more Source cves: CVE-2014-1972 Source...

CVE-2014-1972

Apache Tapestry prior to 5.3.6 is vulnerable due to storing objects on the client side without verifying client modifications, enabling denial of service or arbitrary code execution via crafted serialized data. Affected: Apache Tapestry versions up to 5.3.5 (and 5.3.x prior to 5.3.6). Root cause:...