Lucene search

K
osvGoogleOSV:GHSA-JQ6G-P65R-44XR
HistoryMay 17, 2022 - 12:29 a.m.

Apache MyFaces Vulnerable to EL Injection

2022-05-1700:29:01
Google
osv.dev
5

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.1%

Information disclosure vulnerability in Apache MyFaces Core 2.0.1 through 2.0.10 and 2.1.0 through 2.1.4 allows remote attackers to inject EL expressions via crafted parameters.

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.1%