Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-14371

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.026
EPSS Ranking 85.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2018-14371
  • Eclipse » Mojarra » Version: 1.2-20
    cpe:2.3:a:eclipse:mojarra:1.2-20
  • Eclipse » Mojarra » Version: 2.0.10
    cpe:2.3:a:eclipse:mojarra:2.0.10
  • Eclipse » Mojarra » Version: 2.0.11
    cpe:2.3:a:eclipse:mojarra:2.0.11
  • Eclipse » Mojarra » Version: 2.0.11-01
    cpe:2.3:a:eclipse:mojarra:2.0.11-01
  • Eclipse » Mojarra » Version: 2.0.11-02
    cpe:2.3:a:eclipse:mojarra:2.0.11-02
  • Eclipse » Mojarra » Version: 2.0.11-03
    cpe:2.3:a:eclipse:mojarra:2.0.11-03
  • Eclipse » Mojarra » Version: 2.0.11-04
    cpe:2.3:a:eclipse:mojarra:2.0.11-04
  • Eclipse » Mojarra » Version: 2.0.4
    cpe:2.3:a:eclipse:mojarra:2.0.4
  • Eclipse » Mojarra » Version: 2.0.4-15
    cpe:2.3:a:eclipse:mojarra:2.0.4-15
  • Eclipse » Mojarra » Version: 2.0.6
    cpe:2.3:a:eclipse:mojarra:2.0.6
  • Eclipse » Mojarra » Version: 2.0.7
    cpe:2.3:a:eclipse:mojarra:2.0.7
  • Eclipse » Mojarra » Version: 2.0.8
    cpe:2.3:a:eclipse:mojarra:2.0.8
  • Eclipse » Mojarra » Version: 2.0.9
    cpe:2.3:a:eclipse:mojarra:2.0.9
  • Eclipse » Mojarra » Version: 2.0.9-01
    cpe:2.3:a:eclipse:mojarra:2.0.9-01
  • Eclipse » Mojarra » Version: 2.0.9-02
    cpe:2.3:a:eclipse:mojarra:2.0.9-02
  • Eclipse » Mojarra » Version: 2.0.9-03
    cpe:2.3:a:eclipse:mojarra:2.0.9-03
  • Eclipse » Mojarra » Version: 2.0.9-04
    cpe:2.3:a:eclipse:mojarra:2.0.9-04
  • Eclipse » Mojarra » Version: 2.0.9-05
    cpe:2.3:a:eclipse:mojarra:2.0.9-05
  • Eclipse » Mojarra » Version: 2.0.9-07
    cpe:2.3:a:eclipse:mojarra:2.0.9-07
  • Eclipse » Mojarra » Version: 2.0.9-08
    cpe:2.3:a:eclipse:mojarra:2.0.9-08
  • Eclipse » Mojarra » Version: 2.1.10
    cpe:2.3:a:eclipse:mojarra:2.1.10
  • Eclipse » Mojarra » Version: 2.1.11
    cpe:2.3:a:eclipse:mojarra:2.1.11
  • Eclipse » Mojarra » Version: 2.1.12
    cpe:2.3:a:eclipse:mojarra:2.1.12
  • Eclipse » Mojarra » Version: 2.1.13
    cpe:2.3:a:eclipse:mojarra:2.1.13
  • Eclipse » Mojarra » Version: 2.1.14
    cpe:2.3:a:eclipse:mojarra:2.1.14
  • Eclipse » Mojarra » Version: 2.1.15
    cpe:2.3:a:eclipse:mojarra:2.1.15
  • Eclipse » Mojarra » Version: 2.1.16
    cpe:2.3:a:eclipse:mojarra:2.1.16
  • Eclipse » Mojarra » Version: 2.1.17
    cpe:2.3:a:eclipse:mojarra:2.1.17
  • Eclipse » Mojarra » Version: 2.1.18
    cpe:2.3:a:eclipse:mojarra:2.1.18
  • Eclipse » Mojarra » Version: 2.1.19
    cpe:2.3:a:eclipse:mojarra:2.1.19
  • Eclipse » Mojarra » Version: 2.1.2
    cpe:2.3:a:eclipse:mojarra:2.1.2
  • Eclipse » Mojarra » Version: 2.1.20
    cpe:2.3:a:eclipse:mojarra:2.1.20
  • Eclipse » Mojarra » Version: 2.1.20-02
    cpe:2.3:a:eclipse:mojarra:2.1.20-02
  • Eclipse » Mojarra » Version: 2.1.20-03
    cpe:2.3:a:eclipse:mojarra:2.1.20-03
  • Eclipse » Mojarra » Version: 2.1.20-04
    cpe:2.3:a:eclipse:mojarra:2.1.20-04
  • Eclipse » Mojarra » Version: 2.1.20-05
    cpe:2.3:a:eclipse:mojarra:2.1.20-05
  • Eclipse » Mojarra » Version: 2.1.20-06
    cpe:2.3:a:eclipse:mojarra:2.1.20-06
  • Eclipse » Mojarra » Version: 2.1.20-07
    cpe:2.3:a:eclipse:mojarra:2.1.20-07
  • Eclipse » Mojarra » Version: 2.1.20-08
    cpe:2.3:a:eclipse:mojarra:2.1.20-08
  • Eclipse » Mojarra » Version: 2.1.20-09
    cpe:2.3:a:eclipse:mojarra:2.1.20-09
  • Eclipse » Mojarra » Version: 2.1.20-10
    cpe:2.3:a:eclipse:mojarra:2.1.20-10
  • Eclipse » Mojarra » Version: 2.1.20-11
    cpe:2.3:a:eclipse:mojarra:2.1.20-11
  • Eclipse » Mojarra » Version: 2.1.20-12
    cpe:2.3:a:eclipse:mojarra:2.1.20-12
  • Eclipse » Mojarra » Version: 2.1.20-13
    cpe:2.3:a:eclipse:mojarra:2.1.20-13
  • Eclipse » Mojarra » Version: 2.1.20-14
    cpe:2.3:a:eclipse:mojarra:2.1.20-14
  • Eclipse » Mojarra » Version: 2.1.20-15
    cpe:2.3:a:eclipse:mojarra:2.1.20-15
  • Eclipse » Mojarra » Version: 2.1.20-16
    cpe:2.3:a:eclipse:mojarra:2.1.20-16
  • Eclipse » Mojarra » Version: 2.1.21
    cpe:2.3:a:eclipse:mojarra:2.1.21
  • Eclipse » Mojarra » Version: 2.1.22
    cpe:2.3:a:eclipse:mojarra:2.1.22
  • Eclipse » Mojarra » Version: 2.1.23
    cpe:2.3:a:eclipse:mojarra:2.1.23
  • Eclipse » Mojarra » Version: 2.1.24
    cpe:2.3:a:eclipse:mojarra:2.1.24
  • Eclipse » Mojarra » Version: 2.1.25
    cpe:2.3:a:eclipse:mojarra:2.1.25
  • Eclipse » Mojarra » Version: 2.1.26
    cpe:2.3:a:eclipse:mojarra:2.1.26
  • Eclipse » Mojarra » Version: 2.1.27
    cpe:2.3:a:eclipse:mojarra:2.1.27
  • Eclipse » Mojarra » Version: 2.1.28
    cpe:2.3:a:eclipse:mojarra:2.1.28
  • Eclipse » Mojarra » Version: 2.1.29
    cpe:2.3:a:eclipse:mojarra:2.1.29
  • Eclipse » Mojarra » Version: 2.1.29-01
    cpe:2.3:a:eclipse:mojarra:2.1.29-01
  • Eclipse » Mojarra » Version: 2.1.29-02
    cpe:2.3:a:eclipse:mojarra:2.1.29-02
  • Eclipse » Mojarra » Version: 2.1.29-03
    cpe:2.3:a:eclipse:mojarra:2.1.29-03
  • Eclipse » Mojarra » Version: 2.1.29-04
    cpe:2.3:a:eclipse:mojarra:2.1.29-04
  • Eclipse » Mojarra » Version: 2.1.29-05
    cpe:2.3:a:eclipse:mojarra:2.1.29-05
  • Eclipse » Mojarra » Version: 2.1.29-06
    cpe:2.3:a:eclipse:mojarra:2.1.29-06
  • Eclipse » Mojarra » Version: 2.1.29-07
    cpe:2.3:a:eclipse:mojarra:2.1.29-07
  • Eclipse » Mojarra » Version: 2.1.29-08
    cpe:2.3:a:eclipse:mojarra:2.1.29-08
  • Eclipse » Mojarra » Version: 2.1.29-09
    cpe:2.3:a:eclipse:mojarra:2.1.29-09
  • Eclipse » Mojarra » Version: 2.1.29-10
    cpe:2.3:a:eclipse:mojarra:2.1.29-10
  • Eclipse » Mojarra » Version: 2.1.29-11
    cpe:2.3:a:eclipse:mojarra:2.1.29-11
  • Eclipse » Mojarra » Version: 2.1.3
    cpe:2.3:a:eclipse:mojarra:2.1.3
  • Eclipse » Mojarra » Version: 2.1.4
    cpe:2.3:a:eclipse:mojarra:2.1.4
  • Eclipse » Mojarra » Version: 2.1.5-01
    cpe:2.3:a:eclipse:mojarra:2.1.5-01
  • Eclipse » Mojarra » Version: 2.1.5-02
    cpe:2.3:a:eclipse:mojarra:2.1.5-02
  • Eclipse » Mojarra » Version: 2.1.5-03
    cpe:2.3:a:eclipse:mojarra:2.1.5-03
  • Eclipse » Mojarra » Version: 2.1.5-04
    cpe:2.3:a:eclipse:mojarra:2.1.5-04
  • Eclipse » Mojarra » Version: 2.1.6
    cpe:2.3:a:eclipse:mojarra:2.1.6
  • Eclipse » Mojarra » Version: 2.1.7
    cpe:2.3:a:eclipse:mojarra:2.1.7
  • Eclipse » Mojarra » Version: 2.1.7-01
    cpe:2.3:a:eclipse:mojarra:2.1.7-01
  • Eclipse » Mojarra » Version: 2.1.7-02
    cpe:2.3:a:eclipse:mojarra:2.1.7-02
  • Eclipse » Mojarra » Version: 2.1.7-03
    cpe:2.3:a:eclipse:mojarra:2.1.7-03
  • Eclipse » Mojarra » Version: 2.1.7-04
    cpe:2.3:a:eclipse:mojarra:2.1.7-04
  • Eclipse » Mojarra » Version: 2.1.7-05
    cpe:2.3:a:eclipse:mojarra:2.1.7-05
  • Eclipse » Mojarra » Version: 2.1.7-06
    cpe:2.3:a:eclipse:mojarra:2.1.7-06
  • Eclipse » Mojarra » Version: 2.1.7-07
    cpe:2.3:a:eclipse:mojarra:2.1.7-07
  • Eclipse » Mojarra » Version: 2.1.7-08
    cpe:2.3:a:eclipse:mojarra:2.1.7-08
  • Eclipse » Mojarra » Version: 2.1.7-09
    cpe:2.3:a:eclipse:mojarra:2.1.7-09
  • Eclipse » Mojarra » Version: 2.1.7-10
    cpe:2.3:a:eclipse:mojarra:2.1.7-10
  • Eclipse » Mojarra » Version: 2.1.8
    cpe:2.3:a:eclipse:mojarra:2.1.8
  • Eclipse » Mojarra » Version: 2.1.9
    cpe:2.3:a:eclipse:mojarra:2.1.9
  • Eclipse » Mojarra » Version: 2.2.0
    cpe:2.3:a:eclipse:mojarra:2.2.0
  • Eclipse » Mojarra » Version: 2.2.1
    cpe:2.3:a:eclipse:mojarra:2.2.1
  • Eclipse » Mojarra » Version: 2.2.10
    cpe:2.3:a:eclipse:mojarra:2.2.10
  • Eclipse » Mojarra » Version: 2.2.11
    cpe:2.3:a:eclipse:mojarra:2.2.11
  • Eclipse » Mojarra » Version: 2.2.12
    cpe:2.3:a:eclipse:mojarra:2.2.12
  • Eclipse » Mojarra » Version: 2.2.13
    cpe:2.3:a:eclipse:mojarra:2.2.13
  • Eclipse » Mojarra » Version: 2.2.14
    cpe:2.3:a:eclipse:mojarra:2.2.14
  • Eclipse » Mojarra » Version: 2.2.15
    cpe:2.3:a:eclipse:mojarra:2.2.15
  • Eclipse » Mojarra » Version: 2.2.16
    cpe:2.3:a:eclipse:mojarra:2.2.16
  • Eclipse » Mojarra » Version: 2.2.17
    cpe:2.3:a:eclipse:mojarra:2.2.17
  • Eclipse » Mojarra » Version: 2.2.18
    cpe:2.3:a:eclipse:mojarra:2.2.18
  • Eclipse » Mojarra » Version: 2.2.2
    cpe:2.3:a:eclipse:mojarra:2.2.2
  • Eclipse » Mojarra » Version: 2.2.3
    cpe:2.3:a:eclipse:mojarra:2.2.3
  • Eclipse » Mojarra » Version: 2.2.4
    cpe:2.3:a:eclipse:mojarra:2.2.4
  • Eclipse » Mojarra » Version: 2.2.5
    cpe:2.3:a:eclipse:mojarra:2.2.5
  • Eclipse » Mojarra » Version: 2.2.6
    cpe:2.3:a:eclipse:mojarra:2.2.6
  • Eclipse » Mojarra » Version: 2.2.7
    cpe:2.3:a:eclipse:mojarra:2.2.7
  • Eclipse » Mojarra » Version: 2.2.8
    cpe:2.3:a:eclipse:mojarra:2.2.8
  • Eclipse » Mojarra » Version: 2.2.8-01
    cpe:2.3:a:eclipse:mojarra:2.2.8-01
  • Eclipse » Mojarra » Version: 2.2.8-02
    cpe:2.3:a:eclipse:mojarra:2.2.8-02
  • Eclipse » Mojarra » Version: 2.2.8-03
    cpe:2.3:a:eclipse:mojarra:2.2.8-03
  • Eclipse » Mojarra » Version: 2.2.8-04
    cpe:2.3:a:eclipse:mojarra:2.2.8-04
  • Eclipse » Mojarra » Version: 2.2.8-05
    cpe:2.3:a:eclipse:mojarra:2.2.8-05
  • Eclipse » Mojarra » Version: 2.2.8-06
    cpe:2.3:a:eclipse:mojarra:2.2.8-06
  • Eclipse » Mojarra » Version: 2.2.8-07
    cpe:2.3:a:eclipse:mojarra:2.2.8-07
  • Eclipse » Mojarra » Version: 2.2.8-08
    cpe:2.3:a:eclipse:mojarra:2.2.8-08
  • Eclipse » Mojarra » Version: 2.2.8-09
    cpe:2.3:a:eclipse:mojarra:2.2.8-09
  • Eclipse » Mojarra » Version: 2.2.8-10
    cpe:2.3:a:eclipse:mojarra:2.2.8-10
  • Eclipse » Mojarra » Version: 2.2.8-11
    cpe:2.3:a:eclipse:mojarra:2.2.8-11
  • Eclipse » Mojarra » Version: 2.2.8-12
    cpe:2.3:a:eclipse:mojarra:2.2.8-12
  • Eclipse » Mojarra » Version: 2.2.8-13
    cpe:2.3:a:eclipse:mojarra:2.2.8-13
  • Eclipse » Mojarra » Version: 2.2.8-14
    cpe:2.3:a:eclipse:mojarra:2.2.8-14
  • Eclipse » Mojarra » Version: 2.2.8-15
    cpe:2.3:a:eclipse:mojarra:2.2.8-15
  • Eclipse » Mojarra » Version: 2.2.8-16
    cpe:2.3:a:eclipse:mojarra:2.2.8-16
  • Eclipse » Mojarra » Version: 2.2.8-17
    cpe:2.3:a:eclipse:mojarra:2.2.8-17
  • Eclipse » Mojarra » Version: 2.2.8-18
    cpe:2.3:a:eclipse:mojarra:2.2.8-18
  • Eclipse » Mojarra » Version: 2.2.8-19
    cpe:2.3:a:eclipse:mojarra:2.2.8-19
  • Eclipse » Mojarra » Version: 2.2.8-22
    cpe:2.3:a:eclipse:mojarra:2.2.8-22
  • Eclipse » Mojarra » Version: 2.2.8-23
    cpe:2.3:a:eclipse:mojarra:2.2.8-23
  • Eclipse » Mojarra » Version: 2.2.8-24
    cpe:2.3:a:eclipse:mojarra:2.2.8-24
  • Eclipse » Mojarra » Version: 2.2.8-25
    cpe:2.3:a:eclipse:mojarra:2.2.8-25
  • Eclipse » Mojarra » Version: 2.2.8-26
    cpe:2.3:a:eclipse:mojarra:2.2.8-26
  • Eclipse » Mojarra » Version: 2.2.8-27
    cpe:2.3:a:eclipse:mojarra:2.2.8-27
  • Eclipse » Mojarra » Version: 2.2.8-28
    cpe:2.3:a:eclipse:mojarra:2.2.8-28
  • Eclipse » Mojarra » Version: 2.2.8-29
    cpe:2.3:a:eclipse:mojarra:2.2.8-29
  • Eclipse » Mojarra » Version: 2.2.8-30
    cpe:2.3:a:eclipse:mojarra:2.2.8-30
  • Eclipse » Mojarra » Version: 2.2.9
    cpe:2.3:a:eclipse:mojarra:2.2.9
  • Eclipse » Mojarra » Version: 2.3.0
    cpe:2.3:a:eclipse:mojarra:2.3.0
  • Eclipse » Mojarra » Version: 2.3.1
    cpe:2.3:a:eclipse:mojarra:2.3.1
  • Eclipse » Mojarra » Version: 2.3.2
    cpe:2.3:a:eclipse:mojarra:2.3.2
  • Eclipse » Mojarra » Version: 2.3.3
    cpe:2.3:a:eclipse:mojarra:2.3.3
  • Eclipse » Mojarra » Version: 2.3.3.99
    cpe:2.3:a:eclipse:mojarra:2.3.3.99
  • Eclipse » Mojarra » Version: 2.3.4
    cpe:2.3:a:eclipse:mojarra:2.3.4
  • Eclipse » Mojarra » Version: 2.3.5
    cpe:2.3:a:eclipse:mojarra:2.3.5
  • Eclipse » Mojarra » Version: 2.3.6
    cpe:2.3:a:eclipse:mojarra:2.3.6


Contact Us

Shodan ® - All rights reserved