|
Apache MyFaces Tomahawk JSF Framework Autoscroll Parameter Cross Site Scripting Vulnerability
To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI. The following proof-of-concept URI is available: http:/;www.example.com/some_app.jsf?autoscroll=[javascript] |
|
|
Privacy Statement |
