The vulnerabilities are located in the login.jsp page, where the key and redirect parameters are directly embedded into the HTML without proper sanitization or ...
We encountered a regression when upgrading from 9.4.20 to 9.4.21 in the session handling code. When a servlet creates a new HttpSession and then forwards to another servlet/jsp that tries to access ...