Apache MyFaces vulnerabilities
2 known vulnerabilities in Apache MyFaces from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest first
- 7.5 High severity
Apache MyFaces: Uncontrolled Resource Consumption
A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to version
- 9.8 Critical severity
Apache MyFaces: Server-Side Request Forgery
Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, or 4.1.4, which fix this issue.