Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 11:07:40 +0000 cnvd-2021-38302 https://cve.radiocsirt.org/vuln/cnvd-2021-38302 cnvd-2021-38302 https://cve.radiocsirt.org/vuln/cnvd-2021-38302 EUVD-2026-26984 https://cve.radiocsirt.org/vuln/euvd-2026-26984 EUVD-2026-26984 https://cve.radiocsirt.org/vuln/euvd-2026-26984 fkie_cve-2021-30638 https://cve.radiocsirt.org/vuln/fkie_cve-2021-30638 <p>Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953. This issue affects Apache Tapestry Apache Tapestry 5.4.0 version to Apache Tapestry 5.6.3; Apache Tapestry 5.7.0 version and Apache Tapestry 5.7.1.</p> <p>Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953. This issue affects Apache Tapestry Apache Tapestry 5.4.0 version to Apache Tapestry 5.6.3; Apache Tapestry 5.7.0 version and Apache Tapestry 5.7.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-30638 GHSA-ghm8-mmx7-xvg2 — Information Exposure in Apache Tapestry https://cve.radiocsirt.org/vuln/ghsa-ghm8-mmx7-xvg2 <p><strong>Affected:</strong> Maven: org.apache.tapestry:tapestry-core</p> <p>Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953. This issue affects Apache Tapestry Apache Tapestry 5.4.0 version to Apache Tapestry 5.6.3; Apache Tapestry 5.7.0 version and Apache Tapestry 5.7.1.</p> <p><strong>Affected:</strong> Maven: org.apache.tapestry:tapestry-core</p> <p>Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953. This issue affects Apache Tapestry Apache Tapestry 5.4.0 version to Apache Tapestry 5.6.3; Apache Tapestry 5.7.0 version and Apache Tapestry 5.7.1.</p> https://cve.radiocsirt.org/vuln/ghsa-ghm8-mmx7-xvg2 gsd-2021-30638 https://cve.radiocsirt.org/vuln/gsd-2021-30638 gsd-2021-30638 https://cve.radiocsirt.org/vuln/gsd-2021-30638