Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7169
HistoryJul 26, 2018 - 3:21 a.m.

Directory Traversal

2018-07-2603:21:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.005 Low

EPSS

Percentile

76.0%

JavaServer Faces is vulnerable to directory traversal. A malicious user can access arbitrary files through loc parameters in the function ResourceManager.java:getLocalePrefix().