Apache MyFaces Core versions 2.0.1 to 2.0.11 and 2.1.0 to 2.1.5 suffer from a remote file disclosure vulnerability.
a113b6a3cb5d4d9cc3a27c8cb2063965d3394277046397171fde1d787ec38f30
Apache MyFaces Core versions 2.0.1 through 2.0.10 and versions 2.1.0 through 2.1.4 suffer from an information disclosure vulnerability.
d5eb3d9ed7651446730a5e35faf0252896a39b6155c7cea7b154e6d8ef44f670