CVE-2016-5019

CoreResponseStateManager in Apache MyFaces Trinidad 1.0.0 through 1.0.13, 1.2.x before 1.2.15, 2.0.x before 2.0.2, and 2.1.x before 2.1.2 might allow attackers to conduct deserialization attacks via a crafted serialized view state string...

PT-2016-6220

Name of the Vulnerable Software and Affected Versions Apache MyFaces Trinidad versions 1.0.0 through 1.0.13 Apache MyFaces Trinidad versions 1.2.x before 1.2.15 Apache MyFaces Trinidad versions 2.0.x before 2.0.2 Apache MyFaces Trinidad versions 2.1.x before 2.1.2 Description The issue allows...

CVE-2016-5019: Deserialization of Untrusted Data

CoreResponseStateManager in Apache MyFaces Trinidad 1.0.0 through 1.0.13, 1.2.x before 1.2.15, 2.0.x before 2.0.2, and 2.1.x before 2.1.2 might allow attackers to conduct deserialization attacks via a crafted serialized view state string...