GHSA-q388-j7cw-ff7wMedium

Path Traversal in Eclipse Mojarra

Published
May 17, 2022
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2013-3827 →

📋 Description

Multiple path traversal flaws where found in Mojarra JSF2 implementation for identifying resources by name or from libraries. An unauthenticated remote attacker can use these flaws to gather otherwise undisclosed information from within an application's root.

🎯 Affected products1

  • maven/org.glassfish:javax.faces:>= 2.0.0, < 2.1.19

🔗 References (5)