CVE-2009-1275

Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances…

published April 9, 2009

CVSS
—
EPSS
3%
Percentile
86.4
In the wild
Unconfirmed
What it is

Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information via unspecified vectors, related to the (1) tiles:putAttribute and (2) tiles:insertTemplate JSP tags.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02811 · 86.4th percentile
Published
2009-04-09T15:00Z
EPSS history
Timeline
  • 09 APR 15:00Z
    Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances…
    cvelistv5