Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CoreResponseStateManager in Apache MyFaces Trinidad 1.0.0 through 1.0.13, 1.2.x before 1.2.15, 2.0.x before 2.0.2, and 2.1.x before 2.1.2 might allow attackers to conduct deserialization attacks via a crafted serialized view state string.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache MyFaces Trinidad 代码问题漏洞
Vulnerability Description
Apache MyFaces Trinidad是美国阿帕奇（Apache）软件基金会的一款包含大量的企业级组件库并支持附件的JSF框架。 Apache MyFaces Trinidad中的CoreResponseStateManager存在安全漏洞。攻击者可借助特制的序列化查看状态字符串利用该漏洞实施反序列化攻击。以下版本受到影响：Apache MyFaces Trinidad 1.0.0至1.0.13版本，1.2.15之前的1.2.x版本，2.0.2之前的2.0.x版本，2.1.2之前的2.1.x版本。
CVSS Information
N/A
Vulnerability Type
N/A