Remote Code Execution

Overview org.glassfish:jakarta.faces is an Oracle's implementation of the JavaServer Faces specification. Affected versions of this package are vulnerable to Remote Code Execution due to path traversal in the resolveURLURL source, String path method of DefaultFaceletFactory, which passes a path...