Information Disclosure

Glassfish is vulnerable to information disclosure. This is because the MessageFormat parameters are not double single quote escaped e.g., ' '0' '...