Path Traversal in Eclipse Mojarra

ALTO 7.5CVE-2018-14371 · GHSA-43q7-q5vp-3g68 · Published 18/07/2018 · updated 17/06/2026

In breve

CVE-2018-14371 è una vulnerabilità ALTO (CVSS 7.5) che riguarda org.glassfish:mojarra-parent, mojarra (eclipse).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.4%, superiore al 91.4% delle vulnerabilità.
Correzione: aggiornare a 2.3.7 o successiva.

Package	Affected versions	Patched versions
org.glassfish:mojarra-parent Maven	`< 2.3.7`	`2.3.7`
mojarra eclipse	`< 2.3.7`	`2.3.7`

Description

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2018-14371 · ADVISORY
eclipse-ee4j/mojarra#4384 · WEB
eclipse-ee4j/mojarra commit 1b43474 · WEB
javaserverfaces/mojarra · Third Party Advisory

Altre vulnerabilità di org.glassfish:mojarra-parent

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free