CVE-2014-1972

high Apache
CVSS v3 Base Score
7.8
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS Score
8.8%
Exploitation probability in 30 days
Top 7% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
None
Availability
C
Published: August 22, 2015 (3918 days ago)
Last Modified: May 6, 2026
Vendor: Apache
Source: NVD

Description

Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consumption) or execute arbitrary code via crafted serialized data.

CWE

CWE-399

Affected Products

apache tapestry

References

🔗 jvn.jp 🔗 jvndb.jvn.jp 🔗 seclists.org 🔗 www.openwall.com 🔗 issues.apache.org