Lucene search

K
osvGoogleOSV:GHSA-43Q7-Q5VP-3G68
HistoryMay 14, 2022 - 2:59 a.m.

Path Traversal in Eclipse Mojarra

2022-05-1402:59:22
Google
osv.dev
20
eclipse mojarra
directory traversal
resourcemanager.java
2.3.7
remote attacker
configuration files
java bytecodes

EPSS

0.005

Percentile

75.9%

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.