Description
Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object.
Remediation
References
http://www.blackhat.com/presentations/bh-dc-10/Byrne_David/BlackHat-DC-2010-Byrne-SGUI-slides.pdf
https://www.trustwave.com/spiderlabs/advisories/TWSL2010-001.txt
Related Vulnerabilities
CVE-2020-2161 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2023-47797 Vulnerability in maven package com.liferay.portal:release.portal.bom
CVE-2020-7773 Vulnerability in npm package markdown-it-highlightjs
CVE-2019-20921 Vulnerability in maven package org.webjars.npm:bootstrap-select
CVE-2014-8349 Vulnerability in maven package com.liferay.portal:portal-web