PatchTheCVEtiles vulnerabilities and fixes
Recent CVEs affecting tiles, with upgrade or downgrade steps. 2 tracked.
tiles has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-11-30. Highest priority: CVE-2023-49735 (score 54/100).
- CVE-2023-49735 HIGH 7.5 DOWNGRADE ** UNSUPPORTED WHEN ASSIGNED ** The value set as the DefaultLocaleResolver.LOCALE_KEY attribute on the sessio
- CVE-2023-30969 HIGH 8.2 UPGRADE The Palantir Tiles1 service was found to be vulnerable to an API wide issue where the service was not perform
FAQ
How do I fix tiles vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tiles being exploited right now?
None of the tracked tiles CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tiles CVE should I patch first?
CVE-2023-49735 currently ranks highest (54/100): ** UNSUPPORTED WHEN ASSIGNED ** The value set as the DefaultLocaleResolver.LOCALE_KEY attribute on the sessio.