Apache Myfaces Core Vulnerabilities