Skip to content
OpenAdvisories

Package · Maven

org.apache.myfaces.core:myfaces-impl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium —
    CVE-2011-4367 Public exploit EPSS 34%

    Apache MyFaces Vulnerable to Path Traversal

    Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2.1.6 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) ln parameter to faces/javax.faces.res…

    org.apache.myfaces.core:myfaces-impl Maven
  • Medium —
    CVE-2010-2057

    Improper Authentication in Apache MyFaces

    shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modificatio…

    org.apache.myfaces.core:myfaces-impl org.apache.myfaces.shared:myfaces-shared-core Maven