Skip to content
OpenAdvisories

Package · Ubuntu

mojarra

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    CVE-2026-120421

    Reflected XSS via client window id in URL client window mode

    In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client window mode is enabled (`jakarta.faces.CLIENT_WINDOW_MODE=url`), the client window id from the `jfwid` or `jakarta.faces.ClientWindow` requ…

    Eclipse Foundation Eclipse Mojarra mojarra mojarra Debian Ubuntu
  • High 7.5
    CVE-2018-14371

    Path Traversal in Eclipse Mojarra

    The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.

    org.glassfish:mojarra-parent mojarra Ubuntu Maven