cbcvebase.
CVE-2014-1972
published 2015-08-22

CVE-2014-1972: Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to…

PriorityP347high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
9.60%
94.9th percentile
Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.

Affected

1 ranges
VendorProductVersion rangeFixed in
apachetapestry<= 5.3.5—
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.