CVE-2014-8122

CVE-2014-8122 describes a race condition in JBoss Weld (pre-2.2.8 and pre-3.0.0 Alpha3) where conversation state stored in a thread-local variable was not sanitized at end of a conversation. This could allow a remote attacker to disclose information from a previous conversation to the current one...