CVEs-PoC/2020/CVE-2020-6950.md

CVE-2020-6950

Description

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

POC

Reference

• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://www.oracle.com/security-alerts/cpujan2022.html
• https://www.oracle.com/security-alerts/cpuoct2021.html

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/Live-Hack-CVE/CVE-2022-46835