NoSuchMethodError org/apache/tiles/template/InsertAttributeModel.execute after migrate from 2.5.25 to struts 6.3.0.2

2024-01-12 Thread ndeleon
] 00f4 ServletWrappe E com.ibm.ws.webcontainer.servlet.ServletWrapper service SRVE0014E: Uncaught service() exception root cause /cris/template/template.jsp: com.ibm.websphere.servlet.error.ServletErrorReport: java.lang.NoSuchMethodError: org/apache/tiles/template/InsertAttributeModel.execute

Re: CVE-2023-49735 in Apache Tiles

2024-01-10 Thread Lukasz Lenart
One correction: I missed the word "onwards" which means Tiles 3 is also affected, yet I assume the report itself is invalid.

Re: CVE-2023-49735 in Apache Tiles

2024-01-10 Thread Sebastian Götz
ault not a library vulnerability, report is invalid IMO. We can move this discussion to security@struts.a.o to get support from ASF Security gurus. [1] https://lists.apache.org/thread/8ktm4vxr6vvc1qsxh6ft8jzmom1zl65p [2] https://github.com/apache/tiles/blob/TILES_2_1_X/tiles-test/src/main/java/

Re: CVE-2023-49735 in Apache Tiles

2024-01-10 Thread Lukasz Lenart
et support from ASF Security gurus. [1] https://lists.apache.org/thread/8ktm4vxr6vvc1qsxh6ft8jzmom1zl65p [2] https://github.com/apache/tiles/blob/TILES_2_1_X/tiles-test/src/main/java/org/apache/tiles/test/servlet/SelectLocaleServlet.java#L81-L102 Cheers Łukasz śr., 10 sty 2024 o 11:08 Sebastian Göt

Re: CVE-2023-49735 in Apache Tiles

2024-01-10 Thread Sebastian Götz
urity issue. As the plugin uses Apache Tiles 3.0.8 underneath it is affected by CVE-2023-49735. Now as we use the struts-tiles-plugin to build our web pages and the Tiles project is already retired, can somebody of the team explain how to mitigate the security issue (besides moving away from Ti

Re: CVE-2023-49735 in Apache Tiles

2024-01-02 Thread Lukasz Lenart
wt., 2 sty 2024 o 13:34 Sebastian Götz napisał(a): > Hello to anybody and an happy new year! Happy New Year! > Our dependency check startet to fail last year already marking > struts2-tiles-plugin as the source of a security issue. As the plugin > uses Apache Tiles 3.0.8 unde

CVE-2023-49735 in Apache Tiles

2024-01-02 Thread Sebastian Götz
Hello to anybody and an happy new year! Our dependency check startet to fail last year already marking struts2-tiles-plugin as the source of a security issue. As the plugin uses Apache Tiles 3.0.8 underneath it is affected by CVE-2023-49735. Now as we use the struts-tiles-plugin to build our

Apache Tiles

2022-11-21 Thread Yew Hwa Ho
Hi , I understand the apache Tiles has already retired (https://tiles.apache.org/). However Tiles is still being used in Struts framework

Re: [S1.3.10] Apache Tiles fail

2009-07-17 Thread Struts Two
nio Petrelli > Subject: Re: [S1.3.10] Apache Tiles fail > To: "Struts Users Mailing List" > Received: Friday, July 17, 2009, 1:03 PM > 2009/7/17 Struts Two : > > > > I have been trying to start a new project using struts > 1.3.10 on Websphere V6.1. However, I ha

Re: [S1.3.10] Apache Tiles fail

2009-07-17 Thread Antonio Petrelli
2009/7/17 Struts Two : > > I have been trying to start a new project using struts 1.3.10 on Websphere > V6.1. However, I have been unable to make tiles work with struts 1.3 . I get > an exception as follows: > > Stack Dump = java.io.FileNotFoundException: mainPage See: http://wiki.apache.org/str

[S1.3.10] Apache Tiles fail

2009-07-17 Thread Struts Two
I have been trying to start a new project using struts 1.3.10 on Websphere V6.1. However, I have been unable to make tiles work with struts 1.3 . I get an exception as follows: Stack Dump = java.io.FileNotFoundException: mainPage .. I have downgraded to strtus 1.2.9 and everything is worki

[ANNOUNCEMENT] Apache Tiles Top Level Project

2007-01-15 Thread Greg Reddin
the relevant mailing lists. Please direct all future questions and discussion about Apache Tiles to one of the following lists: * Tiles User Discussion <[EMAIL PROTECTED]> * Tiles Development <[EMAIL PROTECTED]> * SVN Commit Notifications <[EMAIL PROTECTED]> * JIRA Issue Trac