CVE-2019-17091: Improper Neutralization of Input During Web Page Generation

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled...

PT-2019-3784

Name of the Vulnerable Software and Affected Versions Eclipse Mojarra versions prior to 2.3.10 Mojarra JavaServer Faces versions prior to 2.2.20 Description The issue is related to the mishandling of a client window field in the faces/context/PartialViewContextImpl.java component of Eclipse...