Back

HIGH

Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371

Published Jun 2, 2021

Description

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

Affected products

Remediation

Red Hat mitigation

There is no currently known mitigation for this flaw.

Weaknesses (1)

References (13)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jun 2, 2021
Updated Aug 4, 2024
Reserved Jan 13, 2020
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Moderate
Public date Feb 20, 2020
GHSA-RPQ8-MMWH-Q9HM