Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 08:00:37 +0000 CVE-2021-30638 — An Information Disclosure due to insufficient input validation exists in Apache Tapestry 5.4.0 and later https://cve.radiocsirt.org/vuln/cve-2021-30638 <p><strong>Affected:</strong> Apache Software Foundation Apache Tapestry</p> <p>Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953. This issue affects Apache Tapestry Apache Tapestry 5.4.0 version to Apache Tapestry 5.6.3; Apache Tapestry 5.7.0 version and Apache Tapestry 5.7.1.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Tapestry</p> <p>Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953. This issue affects Apache Tapestry Apache Tapestry 5.4.0 version to Apache Tapestry 5.6.3; Apache Tapestry 5.7.0 version and Apache Tapestry 5.7.1.</p> https://cve.radiocsirt.org/vuln/cve-2021-30638