CVE-2011-4343

Published: Aug 8, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Information disclosure vulnerability in Apache MyFaces Core 2.0.1 through 2.0.10 and 2.1.0 through 2.1.4 allows remote attackers to inject EL expressions via crafted parameters.

Affected (15)

Products: Apache: Myfaces

Apache

1 product

Myfaces

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Apache Myfaces	Version 2.0.10
Apache Myfaces	Version 2.0.1
Apache Myfaces	Version 2.0.2
Apache Myfaces	Version 2.0.3
Apache Myfaces	Version 2.0.4
Apache Myfaces	Version 2.0.5
Apache Myfaces	Version 2.0.6
Apache Myfaces	Version 2.0.7
Apache Myfaces	Version 2.0.8
Apache Myfaces	Version 2.0.9
Apache Myfaces	Version 2.1.0
Apache Myfaces	Version 2.1.1
Apache Myfaces	Version 2.1.2
Apache Myfaces	Version 2.1.3
Apache Myfaces	Version 2.1.4