Lucene search

Mojarra Security Vulnerabilities

cve

CVE-2018-14371

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.

7.5CVSS

6.7AI Score

0.005EPSS

2018-07-18 12:29 PM

141

cve

CVE-2019-17091

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.

6.1CVSS

6.4AI Score

0.002EPSS

2019-10-02 02:15 PM

113

cve

CVE-2020-6950

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

6.5CVSS

6.7AI Score

0.051EPSS

2021-06-02 04:15 PM

189