Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (2)
| Vulnerability |
Summary |
Aliases |
|
VCID-1rtf-aum8-33hg
|
Mojarra: deployed web applications can read FacesContext from other applications under certain conditions
|
CVE-2012-2672
|
|
VCID-s1tt-jj2t-5yc9
|
XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions
This package does not perform appropriate encoding when a `<h:outputText>` tag or EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.
|
CVE-2013-5855
GHSA-3m3r-82gc-53mj
|