{"action":"Upgrade org.apache.myfaces.core:myfaces-impl to 2.0.12 (2.0.x) or 2.1.6 (2.1.x) or later.","affected":[{"fixed":"2.0.12","introduced":"2.0.0"},{"fixed":"2.1.6","introduced":"2.1.0"}],"component":"org.apache.myfaces.core:myfaces-impl","cve_ids":["CVE-2011-4367"],"ecosystem":"Maven","epss":0.33747,"exploited":false,"fixed_versions":["2.0.12","2.1.6"],"ghsa_id":"GHSA-gjfx-9wx3-j6r7","id":"tcs_01M5N8YEXHNHKADG5YH49CZTJ9","modified_at":"2024-11-29T05:41:33.102581Z","published_at":"2022-05-13T01:24:34Z","references":["https://osv.dev/vulnerability/GHSA-gjfx-9wx3-j6r7","https://nvd.nist.gov/vuln/detail/CVE-2011-4367","https://exchange.xforce.ibmcloud.com/vulnerabilities/73100","https://web.archive.org/web/20120213042504/http://www.securityfocus.com/bid/51939","http://mail-archives.apache.org/mod_mbox/myfaces-announce/201202.mbox/%3C4F33ED1F.4070007%40apache.org%3E","http://seclists.org/fulldisclosure/2012/Feb/150"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-gjfx-9wx3-j6r7","url":"https://osv.dev/vulnerability/GHSA-gjfx-9wx3-j6r7"}],"summary":"Apache MyFaces Vulnerable to Path Traversal"}