Cross-Site Scripting Vulnerability in Oracle Mojarra for IBM WebSphere and Caucho Resin
CVE-2010-2087

Currently unrated

Key Information:

Vendor

Oracle
Status
Mojarra
Vendor
CVE Published:
27 May 2010

What is CVE-2010-2087?

The Oracle Mojarra library, utilized in applications like IBM WebSphere Application Server and Caucho Resin, has a vulnerability that fails to securely handle unencrypted view states. This flaw allows remote attackers to exploit the serialized view object, potentially leading to cross-site scripting (XSS) attacks or executing unauthorized Expression Language (EL) statements. Proper precautions must be taken to safeguard against these exploitation vectors.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.trustwave.com/spiderlabs/advisories/TWSL2010-...
x_refsource_MISC
http://www.blackhat.com/presentations/bh-dc-10/Byrne_Davi...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.