Vulnerabilities > Eclipse > Mojarra > 2.2.12

DATE CVE VULNERABILITY TITLE RISK
2021-06-02 CVE-2020-6950 Path Traversal vulnerability in multiple products
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
network
low complexity
eclipse oracle CWE-22
6.5
6.5
2018-07-18 CVE-2018-14371 Path Traversal vulnerability in Eclipse Mojarra
The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter.
network
low complexity
eclipse CWE-22
7.5
7.5