virus logo Intrusion Prevention

Apache.MyFaces.Tomahawk.JSF.Framework.XSS

description-logoDescription

This remotely exploitable input validation vulnerability in Apache Software Foundation's MyFaces Tomahawk JSF framework could allow an attacker to perform a cross-site scripting attack.

affected-products-logoAffected Products

MyFaces Tomahawk JSF framework version 1.1.5

Impact logoImpact

Cross Site Scripting.

recomended-action-logoRecommended Actions

The Apache Software Foundation MyFaces team has addressed this vulnerability by releasing version 1.1.6 of MyFaces Tomahawk. More information can be found at the following URL.
http://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12312536&styleName=Text&projectId=12310272

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)
ID 14642
Created Jun 15, 2007
Updated Aug 29, 2022
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2007-3101
Exploit Prediction Score 65.42%
Default Action pass
Active
Affected OS Windows, Linux
Affected App Apache