Tiles (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2023-11-30. Vendor: Apache.

CVEs of Tiles

• CVE-2023-49735 - CVSS 7.5 (high), 2023-11-30: ** UNSUPPORTED WHEN ASSIGNED ** The value set as the DefaultLocaleResolver.LOCALE_KEY attribute on the session was not validated while resolving XML…
• CVE-2009-1275 - CVSS 6.8 (medium), 2009-04-09: Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances,…