Apache MyFaces 2.0 / 2.1 Information Disclosure

[Java-monitor RSS bot]

Apache MyFaces Core versions 2.0.1 through 2.0.10 and versions 2.1.0 through 2.1.4 suffer from an information disclosure vulnerability.

More... (http://packetstormsecurity.org/files/107530/apachemyfaces-disclose.txt)