apache__myfaces_CVE-2011-4367_2-0-11

Apache 对 JavaServer Faces JSF 和 Jakarta Faces 规范的实现 Branches main Jakarta Faces 5.0 实现 4.1.x Jakarta Faces 4.1 实现 4.0.x Jakarta Faces 4.0 实现 基于重构的 2.3-next 代码库 2.3-next （几乎）JavaServer Faces 2.3 实现 与 2.3 相比完全重构的代码库，同时提供 Quarkus 扩展 2.3-next 等同于 JSF 2.3 API，但将 @ManagedBeans 委托给 CDI；通过 XML 配置的...

The vulnerability of the getLocalePrefix function in ResourceManager.java of the Eclipse Mojarra library, as a implementation of EE4J Eclipse for the Jakarta Faces specification, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the getLocalePrefix function in the ResourceManager.java file of the Eclipse Mojarra library, as a implementation of EE4J Eclipse for the Jakarta Faces specification, is related to an incorrect restriction on the path name to the restricted directory. Exploiting this...