Lucene search
PRIOn knowledge basePRION:CVE-2022-46366HistoryDec 02, 2022 - 2:15 p.m.
Deserialization of untrusted data
2022-12-0214:15:00
PRIOn knowledge base
www.prio-n.com
5
untrusted data deserialization
remote code execution
apache tapestry 3.x
UNSUPPORTED WHEN ASSIGNED Apache Tapestry 3.x allows deserialization of untrusted data, leading to remote code execution. This issue is similar to but distinct from CVE-2020-17531, which applies the the (also unsupported) 4.x version line. NOTE: This vulnerability only affects Apache Tapestry version line 3.x, which is no longer supported by the maintainer. Users are recommended to upgrade to a supported version line of Apache Tapestry.
Related
nvd
nvd
CVE-2022-46366
2022-12-02 14:15:10
CVE-2020-17531
2020-12-08 13:15:13
cvelist
cvelist
cve
cve
CVE-2022-46366
2022-12-02 14:15:10
CVE-2020-17531
2020-12-08 13:15:13
redhatcve
redhatcve
CVE-2022-46366
2022-12-05 17:01:16
osv
osv
Apache Tapestry allows deserialization of untrusted data
2022-12-02 15:30:26
Serialization vulnerability in Apache Tapestry
2022-02-09 22:50:50
CVE-2020-17531
2020-12-08 13:15:13
vulnrichment
vulnrichment
github
github
Apache Tapestry allows deserialization of untrusted data
2022-12-02 15:30:26
Serialization vulnerability in Apache Tapestry
2022-02-09 22:50:50
openvas
openvas
Apache Tapestry 3.x RCE Vulnerability
2022-12-05 00:00:00
cnvd
cnvd
Apache Tapestry Remote Code Execution Vulnerability
2022-12-05 00:00:00
prion
prion
Deserialization of untrusted data
2020-12-08 13:15:00