CVE-2008-1285 Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF)
MediumCVSS 4.3
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| com.sun.faces/jsf-api(Maven) | < 1.2.08 | 1.2.08 |
| com.sun.faces/jsf-api(Maven) | = 1.2 | No fix listed |
| sun jsf | <= 1.2_07 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugzilla.redhat.com
- sun-jsf-routines-xss(41081) vdb-entry
- RHSA-2008:0828 vendor-advisory
- github.com
- RHSA-2008:0825 vendor-advisory
- RHSA-2008:0826 vendor-advisory
- RHSA-2008:0827 vendor-advisory
- 29327 third-party-advisory
- 233561 patch vendor-advisory
- www.redhat.com
- www.redhat.com
- 28192 vdb-entry
- 1020628 vdb-entry
- ADV-2008-0808 vdb-entry
- jira.jboss.org