cbcvebase.

Eclipse Foundation Eclipse Mojarra vulnerabilities

1 known vulnerability affecting eclipse_foundation/eclipse_mojarra.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2026-46581P3HIGHCVSS 7.5≥ 2.3, ≤ 5.02026-08-05
CVE-2026-46581 [HIGH] CWE-22 CVE-2026-46581: In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not prope In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing an attacker to specify a URL to a remote Facelet which will be included and processed as part of the normal request, with the privileges of the target server. This could allow access to restricted files suc
nvd