github_osv/GHSA-q388-j7cw-ff7w
Path Traversal in Eclipse Mojarra
Multiple path traversal flaws where found in Mojarra JSF2 implementation for identifying resources by name or from libraries. An unauthenticated remote attacker can use these flaws to gather otherwise undisclosed information from within an application's root.
gitlab/maven/com.sun.faces/jsf-impl/CVE-2013-3827
XML External Entity (XXE) injection
This package allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.
gitlab/maven/org.glassfish/javax.faces/CVE-2013-3827
Relative Path Traversal
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.