pkg:maven/org.apache.myfaces.core/myfaces-core-module

Type maven
Namespace org.apache.myfaces.core
Name myfaces-core-module

Known advisories, vulnerabilities and fixes for org.apache.myfaces.core/myfaces-core-module package.

Repository
https://mvnrepository.com/artifact/org.apache.myfaces.core/myfaces-core-module
High 2
Moderate 1
Type Version Distribution # CVEs # Advisory ID Title Severity Published
Affected >= 1.2.0, <= 1.2.8 <= 1.1.7 CVE-2010-2086
maven MAVEN:GHSA-92CV-WV2C-8899 Apache MyFaces Cross-site Scripting vulnerability moderate 2022-05-17T05:50:42
(2 years ago)
Affected >= 2.3.0, < 2.3.8 >= 2.2.0, < 2.2.14 >= 2.1.0, < 2.1.19 < 2.0.25 CVE-2021-26296
maven MAVEN:GHSA-GQ67-PP9W-43GP Cryptographically weak CSRF tokens in Apache MyFaces high 2021-06-16T17:31:39
(3 years ago)
Fixed = 2.3.8 = 2.2.14 = 2.1.19 = 2.0.25 CVE-2021-26296
maven MAVEN:GHSA-GQ67-PP9W-43GP Cryptographically weak CSRF tokens in Apache MyFaces high 2021-06-16T17:31:39
(3 years ago)
Affected >= 2.1.0, <= 2.1.4 >= 2.0.1, <= 2.0.10 CVE-2011-4343
maven MAVEN:GHSA-JQ6G-P65R-44XR Apache MyFaces Vulnerable to EL Injection high 2022-05-17T00:29:01
(2 years ago)
Fixed = 2.1.5 = 2.0.11 CVE-2011-4343
maven MAVEN:GHSA-JQ6G-P65R-44XR Apache MyFaces Vulnerable to EL Injection high 2022-05-17T00:29:01
(2 years ago)
Loading...