CVE-2018-14371

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter

published July 18, 2018

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04425 · 91.3th percentile
Published
2018-07-18T12:00Z
EPSS history
Timeline
  • 18 JUL 12:00Z
    The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter
    cvelistv5