mojarragadget

mojarragadget descripción Hemos encontrado una nueva cadena de gadgets Java en la librería Mojarra; este repositorio contiene 2 POC para reproducir el exploit en las versiones 2.3 y 3.0. Más información aquí: https://www.synacktiv.com/publications/finding-gadgets-like-its-2015-part-1.html...

GHSA-RJHX-C9QH-QH8F Cross-site Scripting in Eclipse Mojarra

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces, allows Reflected XSS because a client window field is mishandled...

UBUNTU-CVE-2018-14371

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications...