org.glassfish:mojarra-parent

Maven2 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting org.glassfish:mojarra-parentpage 1 of 1

CVE-2018-14371HIGHCVSS 7.5✓ Fixed in 2.3.7
2018-07-18
The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.
CVE-2020-6950MEDIUMCVSS 6.5EG 6.5✓ Fixed in 2.3.14
2021-06-02
vulnerable: 2.3.10, 2.3.11, 2.3.12, 2.3.13, 2.3.9
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

Check whether org.glassfish:mojarra-parent is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.glassfish:mojarra-parent CVEs against the assets you own.

Start Free Scan →