~ / search / GHSA-rpq8-mmwh-q9hm

GHSA-rpq8-mmwh-q9hm

Directory traversal in Eclipse Mojarra

Source: GitHub Advisory Database (reviewed) High CVE-2020-6950

Packages

EcosystemPackageAffectedFixed in
Maven org.glassfish:mojarra-parent < 2.3.14 2.3.14

Details

As written in the advisory (Markdown source, shown as plain text).

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

References

External links from the advisory. They lead to third-party sites.