CVE-2020-6950

Published June 2nd, 2021

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

eclipse-ee4j/mojarra

Mojarra, a Jakarta Faces implementation

GitHub

184