CVE-2008-1285

CVE-2008-1285 is an XSS in Sun JavaServer Faces (JSF) 1.2 prior to 1.2_08. The vulnerability allows remote injection of script/HTML via unknown vectors. Related Red Hat advisories (RHSA-2008:0825/0826/0827/0828) fix the JSF-related XSS in JBoss EAP bundles: JBoss EAP 4.2.0.CP03 and 4.3.0.CP01 rec...