VDB
BDU%3A2019-04080
BDU%3A2019-04080
PUBLISHED
CVSS 5.800000190734863 MEDIUM
Уязвимость компонента faces/context/PartialViewContextImpl.java библиотеки Eclipse Mojarra, как реализации спецификаций Mojarra JavaServer Faces и Eclipse EE4J, позволяющая нарушителю осуществить межсайтовую сценарную атаку
Risk Scores
CVSS 2.0
5.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Eclipse Foundation, Сообщество свободного программного обеспечения | Oracle Secure Global Desktop, Oracle Retail Merchandising System, Application Testing Suite, Eclipse mojarra, Mojarra JavaServer faces, Primavera P6 Enterprise Project Portfolio Management, Oracle Communications Unified Inventory Management, Oracle Retail Assortment Planning, Retail Integration Bus, Banking Enterprise Product Manufacturing, Oracle Retail Financial Integration, Oracle Retail Service Backbone, Rapid Planning, Retail Store Inventory Management, Oracle Retail Invoice Matching, Oracle Communications Network Integrity, Communications Diameter Signaling Router, Oracle Retail Bulk Data Integration, Enterprise Data Quality |
Timeline
- Nov 19, 2019 CVE Published
- Feb 25, 2021 CVE Updated
References
- https://www.oracle.com/technetwork/topics/security/public-vuln-to-advisory-mapping-093627.html url
- https://nvd.nist.gov/vuln/detail/CVE-2019-17091 url
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=548244 url
- https://github.com/eclipse-ee4j/mojarra/commit/8f70f2bd024f00ecd5b3dcca45df73edda29dcee url
- https://github.com/eclipse-ee4j/mojarra/commit/a3fa9573789ed5e867c43ea38374f4dbd5a8f81f url
- https://github.com/eclipse-ee4j/mojarra/compare/2.3.9-RELEASE...2.3.10-RELEASE url
- https://github.com/eclipse-ee4j/mojarra/issues/4556 url
- https://github.com/eclipse-ee4j/mojarra/pull/4567 url
- https://github.com/javaserverfaces/mojarra/commit/ae1c234d0a6750822ac69d4ae26d90e3571f27fe url
- https://github.com/javaserverfaces/mojarra/commit/f61935cd39f34329fbf27b1972a506fbdd0ab4d4 url
- https://github.com/javaserverfaces/mojarra/compare/2.2.19...2.2.20 url
- https://www.oracle.com/security-alerts/cpuapr2020.html url
- https://www.oracle.com/security-alerts/cpujul2020.html url
- https://www.oracle.com/security-alerts/cpuoct2020.html url
- https://www.oracle.com/security-alerts/cpujan2021.html url
- https://www.oracle.com/security-alerts/cpujan2020.html advisory