GitHub Advisoryadvisory · Maven

GHSA-q388-j7cw-ff7w Path Traversal in Eclipse Mojarra

MEDIUM Published 2022-05-17 Modified 2022-11-03 Official page ↗
Aliases
CVE-2013-3827
Ecosystem
Maven
Packages
org.glassfish:javax.faces
Severity
Moderate
Weaknesses
CWE-22
Reviewed
2022-11-03

Affected packages

• Maven org.glassfish:javax.faces: >= 2.0.0, < 2.1.19 → fixed in 2.1.19

Description

Multiple path traversal flaws where found in Mojarra JSF2 implementation for identifying resources by name or from libraries. An unauthenticated remote attacker can use these flaws to gather otherwise undisclosed information from within an application's root.

Related

Alias · CVE (1)

  • CVE-2013-3827 Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References