CVE-2011-4367

Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2.1.6 allow remote…

published June 19, 2014

CVSS
—
EPSS
34%
Percentile
98.4
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2.1.6 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) ln parameter to faces/javax.faces.resource/web.xml or (2) the PATH_INFO to faces/javax.faces.resource/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.33747 · 98.4th percentile
Published
2014-06-19T14:00Z
EPSS history
Timeline
  • 19 JUN 14:00Z
    Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2.1.6 allow remote…
    cvelistv5