Apache Tiles vulnerabilities

1 known vulnerability in Apache Tiles from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache Tiles: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-49735Nov 30, 2023ApacheEPSS 1.36%

  ** UNSUPPORTED WHEN ASSIGNED ** The value set as the DefaultLocaleResolver.LOCALE_KEY attribute on the session was not validated while resolving XML definition files, leading to possible path traversal and eventually SSRF/XXE when passing user-controlled data