mojarragadget

mojarragadget descrizione Abbiamo trovato una nuova catena di gadget Java nella libreria Mojarra, questa repository contiene 2 POC per riprodurre l'exploit sulle versioni 2.3 e 3.0. Maggiori informazioni qui: https://www.synacktiv.com/publications/finding-gadgets-like-its-2015-part-1.html...

GHSA-RJHX-C9QH-QH8F Cross-site Scripting in Eclipse Mojarra

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces, allows Reflected XSS because a client window field is mishandled...

UBUNTU-CVE-2018-14371

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications...