Back

HIGH

mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter

Published Jul 18, 2018

Description

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.

Affected products

Remediation

Red Hat mitigation

There is no currently known mitigation for this flaw.

Metrics

Weaknesses (1)

References (8)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 18, 2018
Updated Aug 5, 2024
Reserved Jul 17, 2018
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Moderate
Public date Jul 18, 2018
GHSA-43Q7-Q5VP-3G68