GHSA-43q7-q5vp-3g68

ghsaUSosv

Path Traversal in Eclipse Mojarra

view advisory published 2022-05-14Licence: CC-BY-4.0

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-14371US	high7.5	4.42% (91st)	—	2018-07-18
The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download config…

references

External citations — patches, advisories, analysis.

https://github.com/eclipse-ee4j/mojarra/commit/1b434748d9239f42eae8aa7d37d7a0930c061e24WEB
https://github.com/eclipse-ee4j/mojarra/pull/4384WEB
https://nvd.nist.gov/vuln/detail/CVE-2018-14371ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan