apache__myfaces_CVE-2011-4367_2-0-11

Apache's implementation of the JavaServer Faces JSF and Jakarta Faces specification Branches main Jakarta Faces 5.0 implementation 4.1.x Jakarta Faces 4.1 implementation 4.0.x...

The vulnerability of the getLocalePrefix function in ResourceManager.java of the Eclipse Mojarra library, as a implementation of EE4J Eclipse for the Jakarta Faces specification, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the getLocalePrefix function in the ResourceManager.java file of the Eclipse Mojarra library, as a implementation of EE4J Eclipse for the Jakarta Faces specification, is related to an incorrect restriction on the path name to the restricted directory. Exploiting this...