Skip to content
OpenAdvisories

Package · Maven

org.apache.myfaces.core:myfaces-core-module

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2010-2086

    Apache MyFaces Cross-site Scripting vulnerability

    Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression…

    org.apache.myfaces.core:myfaces-core-module Maven