Apache Tapestry 漏洞

时间轴

版本

5.04
5.14
5.24
5.34
5.44

修正

Official Fix6
Temporary Fix0
Workaround0
Unavailable0
Not Defined4

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined10

访问向量

Not Defined0
Physical0
Local2
Adjacent2
Network6

身份验证

Not Defined0
High0
Low4
None6

用户交互

Not Defined0
Required0
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤52
≤62
≤72
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤52
≤62
≤74
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤44
≤50
≤64
≤70
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤82
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k0
<5k4
<10k0
<25k4
<50k2
<100k0
≥100k0

本日攻击

<1k8
<2k0
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (27): 3.0, 4, 5.0, 5.1, 5.2, 5.3, 5.3.1, 5.3.2, 5.3.3, 5.3.4, 5.3.5, 5.3.6, 5.4, 5.4.1, 5.4.2, 5.4.3, 5.4.4, 5.4.5, 5.5, 5.6, 5.6.1, 5.6.2, 5.6.3, 5.7, 5.7.1, 5.8, 5.8.1

Link to Product Website: https://www.apache.org/

已发布BaseTemp漏洞0day今天易修正CTICVE
2022-12-028.07.9Apache Tapestry 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2022-46366
2022-07-136.56.4Apache Tapestry Content-Type org.apache.tapestry5.http.ContentType 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-31781
2021-04-283.53.5Apache Tapestry URL 信息公开$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2021-30638
2021-04-155.35.1Apache Tapestry AppModule.class 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.07CVE-2021-27850
2020-12-098.07.7Apache Tapestry 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-17531
2020-09-304.34.3Apache Tapestry URL 信息公开$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-13953
2019-09-166.46.1Apache Tapestry ctx ContextResource 目录遍历$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2019-0207
2019-09-167.57.2Apache Tapestry AppModule 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2019-0195
2019-08-239.89.0Apache Tapestry HMAC Verification 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-10071
2015-08-227.37.0Apache Tapestry Client-Side Object Storage 拒绝服务$25k-$100k$0-$5kNot DefinedOfficial Fix0.03CVE-2014-1972

更多条目由 Apache

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!