Lucene search

K
osvGoogleOSV:CVE-2018-14371
HistoryJul 18, 2018 - 12:29 p.m.

CVE-2018-14371

2018-07-1812:29:00
Google
osv.dev
17

AI Score

6.7

Confidence

Low

EPSS

0.005

Percentile

75.9%

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.

AI Score

6.7

Confidence

Low

EPSS

0.005

Percentile

75.9%