Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF)

MÉDIO 4.3CVE-2008-1285 · GHSA-vv6j-5x58-q2c3 · Published 11/03/2008 · updated 16/06/2026

Em resumo

CVE-2008-1285 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta com.sun.faces:jsf-api, jsf (sun).
Chance de exploração nos próximos 30 dias (EPSS): 2.5%, maior que 85.0% das vulnerabilidades.
Correção: atualize para 1.2.08 ou posterior.

Package	Affected versions	Patched versions
com.sun.faces:jsf-api Maven	`< 1.2.08`	`1.2.08`
jsf sun	`≤ 1.2_07`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

NVD description

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free