Package · Maven

org.apache.myfaces.shared:myfaces-shared-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium —

CVE-2010-2057

Improper Authentication in Apache MyFaces

shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modificatio…

org.apache.myfaces.core:myfaces-impl org.apache.myfaces.shared:myfaces-shared-core Maven

Oct 20, 2010