JBoss Enterprise Application Platform信息泄漏漏洞

BUGTRAQ ID: 30540 CVE ID:CVE-2008-3273 CVE-2008-1285 CNCVE ID：CNCVE-20083273 CNCVE-20081285 JBoss Enterprise Application Platform是一款企业级应用平台。 JBoss Enterprise Application Platform存在信息泄漏问题，远程攻击者可以利用漏洞获得配置的WEB上下文，或进行跨站脚本攻击。 -JavaServer Faces JSF组件存在多个跨站脚本攻击，可导致注入任意WEB脚本或HTML。...

CVE-2008-1285

CVE-2008-1285 is an XSS in Sun JavaServer Faces (JSF) 1.2 prior to 1.2_08. The vulnerability allows remote injection of script/HTML via unknown vectors. Related Red Hat advisories (RHSA-2008:0825/0826/0827/0828) fix the JSF-related XSS in JBoss EAP bundles: JBoss EAP 4.2.0.CP03 and 4.3.0.CP01 rec...