Vulnerabilities > Apache > Tapestry > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2020-09-30 | CVE-2020-13953 | Files or Directories Accessible to External Parties vulnerability in Apache Tapestry In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run. | 5.3 |