Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache Tapestry prior to version 4 (EOL) allows RCE though deserialization of untrusted input
Vulnerability Description
Apache Tapestry 3.x allows deserialization of untrusted data, leading to remote code execution. This issue is similar to but distinct from CVE-2020-17531, which applies the the (also unsupported) 4.x version line. NOTE: This vulnerability only affects Apache Tapestry version line 3.x, which is no longer supported by the maintainer. Users are recommended to upgrade to a supported version line of Apache Tapestry.
CVSS Information
N/A
Vulnerability Type
可信数据的反序列化
Vulnerability Title
Apache Tapestry 代码问题漏洞
Vulnerability Description
Apache Tapestry是美国阿帕奇（Apache）基金会的一款使用Java语言编写的Web应用程序框架。 Apache Tapestry 3.x版本存在代码问题漏洞，该漏洞源于其允许对不受信任的数据进行反序列化导致攻击者可以实现远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A