Vulnerabilities (CVE)

Filtered by vendor Eclipse Subscribe
Filtered by product Mojarra
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-14371 1 Eclipse 1 Mojarra 2018-09-17 5.0 MEDIUM 7.5 HIGH
The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.