Lucene search
Veracode Vulnerability DatabaseVERACODE:27499HistoryOct 01, 2020 - 6:38 a.m.
Information Disclosure
2020-10-0106:38:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.001 Low
EPSS
Percentile
45.7%
tapestry-core is vulnerable to information disclosure. Mishandling of URL allows an attacker to use malicious URL to list and download the JAVA webapp files from WEB-INF of the WAR being run.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tapestry-core | le | 5.5.0 |
Related
nvd
nvd
CVE-2020-13953
2020-09-30 18:15:21
CVE-2021-30638
2021-04-27 19:15:07
prion
prion
Code injection
2020-09-30 18:15:00
Information disclosure
2021-04-27 19:15:00
osv
osv
CVE-2020-13953
2020-09-30 18:15:21
Improper file downloads in Apache Tapestry
2022-02-10 20:35:42
Information Exposure in Apache Tapestry
2022-03-18 17:53:58
cve
cve
CVE-2020-13953
2020-09-30 18:15:21
CVE-2021-30638
2021-04-27 19:15:07
github
github
Improper file downloads in Apache Tapestry
2022-02-10 20:35:42
Information Exposure in Apache Tapestry
2022-03-18 17:53:58
checkpoint_advisories
checkpoint_advisories
Apache Tapestry Information Disclosure (CVE-2020-13953)
2020-12-22 00:00:00
cvelist
cvelist
CVE-2020-13953
2020-09-30 16:51:59
veracode
veracode
Information Disclosure
2021-04-28 06:39:37
openvas
openvas