Security Advisory

CVE-2022-46366

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-12-02 00:00:00

Last updated 2024-08-03 14:31:46

Assigner apache

CVSS score not scored

State PUBLISHED

Description

Apache Tapestry 3.x allows deserialization of untrusted data, leading to remote code execution. This issue is similar to but distinct from CVE-2020-17531, which applies the the (also unsupported) 4.x version line. NOTE: This vulnerability only affects Apache Tapestry version line 3.x, which is no longer supported by the maintainer. Users are recommended to upgrade to a supported version line of Apache Tapestry.

← Browse all CVEs View on cve.org ↗