Nuxeo Authentication Bypass and RCE Vulnerabilities

Nuxeo Platform is a cross-platform open source enterprise-class content management system CMS. An authentication bypass and RCE vulnerability exists in Nuxeo. The vulnerability is due to improper handling of facelet templates by the nuxeo-jsf-ui component, when accessing a facelet template does n...