GHSA-q388-j7cw-ff7w

ghsaUSosv

Path Traversal in Eclipse Mojarra

view advisory published 2022-05-17Licence: CC-BY-4.0

Multiple path traversal flaws where found in Mojarra JSF2 implementation for identifying resources by name or from libraries. An unauthenticated remote attacker can use these flaws to gather otherwise undisclosed information from within an application's root.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2013-3827US	medium5.0	32.4% (98th)	Exploit	2013-10-16
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware…

references

External citations — patches, advisories, analysis.

http://rhn.redhat.com/errata/RHSA-2014-0029.htmlWEB
http://www.kb.cert.org/vuls/id/526012WEB
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-3827WEB
https://nvd.nist.gov/vuln/detail/CVE-2013-3827ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan