Search for packages
| purl | pkg:deb/debian/mojarra@2.0.3-1%2Bsqueeze1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1rtf-aum8-33hg
Aliases: CVE-2012-2672 |
Mojarra: deployed web applications can read FacesContext from other applications under certain conditions |
Affected by 0 other vulnerabilities. |
|
VCID-qyr6-8ydt-dfaa
Aliases: CVE-2011-4358 |
injection: includeViewParameters re-evaluates param/model values as EL expressions |
Affected by 2 other vulnerabilities. |
|
VCID-s1tt-jj2t-5yc9
Aliases: CVE-2013-5855 GHSA-3m3r-82gc-53mj |
XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions This package does not perform appropriate encoding when a `<h:outputText>` tag or EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||