Advisories for Maven/Com.sun.faces/Project package

Directory traversal in Eclipse Mojarra allows attackers to read arbitrary files via the loc or con parameter.

faces/context/PartialViewContextImpl.java allows Reflected XSS because a client window field is mishandled.

The getLocalePrefix function in ResourceManager contains a Path Traversal vulnerability.